From 0d03bb8ca6e9b97d1e8d2222dcfeb2fc1bb063ac Mon Sep 17 00:00:00 2001 From: Dobin Rutishauser Date: Tue, 20 May 2025 22:48:33 +0200 Subject: [PATCH] add: data --- beacon.bin | Bin 42 -> 711 bytes lab_results/metasploit/aes.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/base64.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/base64api.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/beacon.bin.metasploit | Bin 0 -> 711 bytes lab_results/metasploit/bin2ip.exe.json | 634 +++++++++++++++++ lab_results/metasploit/bin2mac.exe.json | 634 +++++++++++++++++ lab_results/metasploit/caesar.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/jargon.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/jigsaw.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/noobfuscation.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/offset.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/rc4api.exe.json | 642 ++++++++++++++++++ .../metasploit/reverse_byte_order.exe.json | 642 ++++++++++++++++++ .../metasploit/reverse_hex_string.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/scan_results.txt | 18 + lab_results/metasploit/twoarray.exe.json | 634 +++++++++++++++++ lab_results/metasploit/uuidapi.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/xor_multibyte.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/xor_reverse.exe.json | 642 ++++++++++++++++++ lab_results/metasploit/xor_single.exe.json | 642 ++++++++++++++++++ lab_results/random_shellcode/aes.exe.json | 642 ++++++++++++++++++ lab_results/random_shellcode/base64.exe.json | 642 ++++++++++++++++++ .../random_shellcode/base64api.exe.json | 642 ++++++++++++++++++ .../random_shellcode/beacon.bin.random | Bin 0 -> 42 bytes lab_results/random_shellcode/bin2ip.exe.json | 642 ++++++++++++++++++ lab_results/random_shellcode/bin2mac.exe.json | 642 ++++++++++++++++++ lab_results/random_shellcode/caesar.exe.json | 642 ++++++++++++++++++ lab_results/random_shellcode/jargon.exe.json | 642 ++++++++++++++++++ lab_results/random_shellcode/jigsaw.exe.json | 642 ++++++++++++++++++ .../random_shellcode/noobfuscation.exe.json | 634 +++++++++++++++++ lab_results/random_shellcode/offset.exe.json | 642 ++++++++++++++++++ lab_results/random_shellcode/rc4api.exe.json | 642 ++++++++++++++++++ .../reverse_byte_order.exe.json | 642 ++++++++++++++++++ .../reverse_hex_string.exe.json | 642 ++++++++++++++++++ lab_results/random_shellcode/scan_results.txt | 18 + .../random_shellcode/twoarray.exe.json | 642 ++++++++++++++++++ lab_results/random_shellcode/uuidapi.exe.json | 642 ++++++++++++++++++ .../random_shellcode/xor_multibyte.exe.json | 642 ++++++++++++++++++ .../random_shellcode/xor_reverse.exe.json | 642 ++++++++++++++++++ .../random_shellcode/xor_single.exe.json | 642 ++++++++++++++++++ 41 files changed, 23116 insertions(+) create mode 100644 lab_results/metasploit/aes.exe.json create mode 100644 lab_results/metasploit/base64.exe.json create mode 100644 lab_results/metasploit/base64api.exe.json create mode 100644 lab_results/metasploit/beacon.bin.metasploit create mode 100644 lab_results/metasploit/bin2ip.exe.json create mode 100644 lab_results/metasploit/bin2mac.exe.json create mode 100644 lab_results/metasploit/caesar.exe.json create mode 100644 lab_results/metasploit/jargon.exe.json create mode 100644 lab_results/metasploit/jigsaw.exe.json create mode 100644 lab_results/metasploit/noobfuscation.exe.json create mode 100644 lab_results/metasploit/offset.exe.json create mode 100644 lab_results/metasploit/rc4api.exe.json create mode 100644 lab_results/metasploit/reverse_byte_order.exe.json create mode 100644 lab_results/metasploit/reverse_hex_string.exe.json create mode 100644 lab_results/metasploit/scan_results.txt create mode 100644 lab_results/metasploit/twoarray.exe.json create mode 100644 lab_results/metasploit/uuidapi.exe.json create mode 100644 lab_results/metasploit/xor_multibyte.exe.json create mode 100644 lab_results/metasploit/xor_reverse.exe.json create mode 100644 lab_results/metasploit/xor_single.exe.json create mode 100644 lab_results/random_shellcode/aes.exe.json create mode 100644 lab_results/random_shellcode/base64.exe.json create mode 100644 lab_results/random_shellcode/base64api.exe.json create mode 100644 lab_results/random_shellcode/beacon.bin.random create mode 100644 lab_results/random_shellcode/bin2ip.exe.json create mode 100644 lab_results/random_shellcode/bin2mac.exe.json create mode 100644 lab_results/random_shellcode/caesar.exe.json create mode 100644 lab_results/random_shellcode/jargon.exe.json create mode 100644 lab_results/random_shellcode/jigsaw.exe.json create mode 100644 lab_results/random_shellcode/noobfuscation.exe.json create mode 100644 lab_results/random_shellcode/offset.exe.json create mode 100644 lab_results/random_shellcode/rc4api.exe.json create mode 100644 lab_results/random_shellcode/reverse_byte_order.exe.json create mode 100644 lab_results/random_shellcode/reverse_hex_string.exe.json create mode 100644 lab_results/random_shellcode/scan_results.txt create mode 100644 lab_results/random_shellcode/twoarray.exe.json create mode 100644 lab_results/random_shellcode/uuidapi.exe.json create mode 100644 lab_results/random_shellcode/xor_multibyte.exe.json create mode 100644 lab_results/random_shellcode/xor_reverse.exe.json create mode 100644 lab_results/random_shellcode/xor_single.exe.json diff --git a/beacon.bin b/beacon.bin index 54ee2479f9e6705789574dd20d7ab8893131eae8..3745006ec9869c6d1084651e382118e35223f816 100644 GIT binary patch literal 711 zcmXX^O=uHA6yBs_#UEPgB?rMd6ltN|WSXBgwuerQcD6~{O{PsZ0gY+h=%#6srW;eM z2c;IW>{0M4h~UMOAW9CBw9-&0*cKw9ms%AgRcMcbu)f6{-n{qbz3+S98|E)v`F7aY z;y8|kh#01LSEhRSI+zU%g(9@=_1GBI^I{NhQe1g4l(=W@L8Q8QhFGfmzr$viJ~Bi? z)Uus?uw*-BZClL)oqoRrCtawjpsr~pb0b?^MB|ePJ9x(+ zf(wsp5G{FJ-H7CJX?a?n@hhs`?d<2B9@OQhlfgg_N-J|R8kJ|~vfb#?t$cP~wqqye zfdW`rBALi5O$Zldu^_I%(u@h^i;+9eK?7&h8|~n*w~xo30UmoDJa)Rc7}csmts4yB?ZjM9^7VJDB1JjXKpf zQYYgKWF0}%{~c;;y~k~LjrwY(aGutxrL!C-lzoTpJrfKN4Ebn0BL*V|00+GaKmY&$ diff --git a/lab_results/metasploit/aes.exe.json b/lab_results/metasploit/aes.exe.json new file mode 100644 index 0000000..ff878b2 --- /dev/null +++ b/lab_results/metasploit/aes.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "YzMwN2I5MzY3OTVkZDI0YWY5Y2UxYzJiMDk2YzJlN2U6MTc0Nzc2ODQ4OQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/YzMwN2I5MzY3OTVkZDI0YWY5Y2UxYzJiMDk2YzJlN2U6MTc0Nzc2ODQ4OQ==", + "item": "https://www.virustotal.com/api/v3/files/ad266a28034033cf107a663dd1e9ca824e677568e9cc6261ff6fe994387441f8" + }, + "attributes": { + "date": 1747768489, + "stats": { + "malicious": 6, + "suspicious": 0, + "undetected": 65, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 1, + "type-unsupported": 4 + }, + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (moderate confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Kryptik@AI.93 (RDML:lhJGOvk7491UoPJIqbMpIg)" + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "failure", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "ad266a28034033cf107a663dd1e9ca824e677568e9cc6261ff6fe994387441f8", + "md5": "c307b936795dd24af9ce1c2b096c2e7e", + "sha1": "9245a51ccb430db05cdc49345e34d8432ac31620", + "size": 145920 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/base64.exe.json b/lab_results/metasploit/base64.exe.json new file mode 100644 index 0000000..1a6efb5 --- /dev/null +++ b/lab_results/metasploit/base64.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTQ2ZWZlNTQxMTlhZDIzM2Y1NzI3YWVhOGE0MDMzNjg6MTc0Nzc2ODUyNQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTQ2ZWZlNTQxMTlhZDIzM2Y1NzI3YWVhOGE0MDMzNjg6MTc0Nzc2ODUyNQ==", + "item": "https://www.virustotal.com/api/v3/files/19371a61e18bd17cac831b3feb34a6b341b1d8b8b278fc0da321714c429c3654" + }, + "attributes": { + "status": "completed", + "date": 1747768525, + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31230", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan:Win64/Meterpreter.D" + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "19371a61e18bd17cac831b3feb34a6b341b1d8b8b278fc0da321714c429c3654", + "md5": "e46efe54119ad233f5727aea8a403368", + "sha1": "f52c07fa9f520a3c643cd8c860988a6ec1772144", + "size": 141312 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/base64api.exe.json b/lab_results/metasploit/base64api.exe.json new file mode 100644 index 0000000..0ce73bc --- /dev/null +++ b/lab_results/metasploit/base64api.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "OWJmYzYzZmI2YTI0OTU3ZDgwNTAwZDNjMzViNGU0M2E6MTc0Nzc2ODU1Nw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/OWJmYzYzZmI2YTI0OTU3ZDgwNTAwZDNjMzViNGU0M2E6MTc0Nzc2ODU1Nw==", + "item": "https://www.virustotal.com/api/v3/files/373a51161c13e91dd27ce4f355b7dd31dc46bd70ee24c5290b6d9221706ce4b2" + }, + "attributes": { + "status": "completed", + "date": 1747768557, + "stats": { + "malicious": 6, + "suspicious": 0, + "undetected": 66, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (high confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "malicious", + "result": "HEUR:Trojan.Win32.Generic" + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Kryptik@AI.93 (RDML:Vcs6/L3/aHZR+MjlctqvXA)" + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "373a51161c13e91dd27ce4f355b7dd31dc46bd70ee24c5290b6d9221706ce4b2", + "md5": "9bfc63fb6a24957d80500d3c35b4e43a", + "sha1": "39a633f984570686c813f470a07c7ca7d0b942f5", + "size": 142336 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/beacon.bin.metasploit b/lab_results/metasploit/beacon.bin.metasploit new file mode 100644 index 0000000000000000000000000000000000000000..3745006ec9869c6d1084651e382118e35223f816 GIT binary patch literal 711 zcmXX^O=uHA6yBs_#UEPgB?rMd6ltN|WSXBgwuerQcD6~{O{PsZ0gY+h=%#6srW;eM z2c;IW>{0M4h~UMOAW9CBw9-&0*cKw9ms%AgRcMcbu)f6{-n{qbz3+S98|E)v`F7aY z;y8|kh#01LSEhRSI+zU%g(9@=_1GBI^I{NhQe1g4l(=W@L8Q8QhFGfmzr$viJ~Bi? z)Uus?uw*-BZClL)oqoRrCtawjpsr~pb0b?^MB|ePJ9x(+ zf(wsp5G{FJ-H7CJX?a?n@hhs`?d<2B9@OQhlfgg_N-J|R8kJ|~vfb#?t$cP~wqqye zfdW`rBALi5O$Zldu^_I%(u@h^i;+9eK?7&h8|~n*w~xo30UmoDJa)Rc7}csmts4yB?ZjM9^7VJDB1JjXKpf zQYYgKWF0}%{~c;;y~k~LjrwY(aGutxrL!C-lzoTpJrfKN4Ebn0BL*V|00+GaKmY&$ literal 0 HcmV?d00001 diff --git a/lab_results/random_shellcode/bin2ip.exe.json b/lab_results/random_shellcode/bin2ip.exe.json new file mode 100644 index 0000000..03edd8d --- /dev/null +++ b/lab_results/random_shellcode/bin2ip.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTFhNDc5MzdkOTg0ZWY1NTY4NDFkZmY4MTYxZDdmOWU6MTc0Nzc2NjI2Ng==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTFhNDc5MzdkOTg0ZWY1NTY4NDFkZmY4MTYxZDdmOWU6MTc0Nzc2NjI2Ng==", + "item": "https://www.virustotal.com/api/v3/files/2a3761abf26b3f5cbf9f917429dbb1767ab51f16bafbdc71c8c556a9991a889f" + }, + "attributes": { + "stats": { + "malicious": 8, + "suspicious": 0, + "undetected": 64, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747766266, + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_70% (D)" + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "malicious", + "result": "ML.Attribute.HighConfidence" + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "malicious", + "result": "ti!2A3761ABF26B" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "malicious", + "result": "PUA.RiskWare.Lsassdumper" + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "2a3761abf26b3f5cbf9f917429dbb1767ab51f16bafbdc71c8c556a9991a889f", + "md5": "e1a47937d984ef556841dff8161d7f9e", + "sha1": "1e20ae6d8661c1d01866915619b4c474c29ba9a4", + "size": 152064 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/bin2mac.exe.json b/lab_results/random_shellcode/bin2mac.exe.json new file mode 100644 index 0000000..f4c5a38 --- /dev/null +++ b/lab_results/random_shellcode/bin2mac.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTVlMmY2ZjgxZGJmNGE2YzI5YzYxZDZhNTMxMTlmMjE6MTc0Nzc2NjM1Mg==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTVlMmY2ZjgxZGJmNGE2YzI5YzYxZDZhNTMxMTlmMjE6MTc0Nzc2NjM1Mg==", + "item": "https://www.virustotal.com/api/v3/files/fffa3c1a04153eeaae01bea1a24e6954cb134362b9136b3c632130f173a056df" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (moderate confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_70% (D)" + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "malicious", + "result": "ML.Attribute.HighConfidence" + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "malicious", + "result": "ti!FFFA3C1A0415" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37739", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "date": 1747766352, + "stats": { + "malicious": 8, + "suspicious": 0, + "undetected": 64, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "fffa3c1a04153eeaae01bea1a24e6954cb134362b9136b3c632130f173a056df", + "md5": "e5e2f6f81dbf4a6c29c61d6a53119f21", + "sha1": "56b9adaeb2eabca69e53b85d2c79b6daca5d74d7", + "size": 140800 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/caesar.exe.json b/lab_results/random_shellcode/caesar.exe.json new file mode 100644 index 0000000..896a783 --- /dev/null +++ b/lab_results/random_shellcode/caesar.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZThmMzM3Y2NiMmY5YmMwMWRkZTUzZGUzYzA1MTMxOWY6MTc0Nzc2NjM3OA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZThmMzM3Y2NiMmY5YmMwMWRkZTUzZGUzYzA1MTMxOWY6MTc0Nzc2NjM3OA==", + "item": "https://www.virustotal.com/api/v3/files/3117d06a9bd8efff3b13b6122d78e919acd7de091c142ce373ad3f8a5ab7c996" + }, + "attributes": { + "status": "completed", + "date": 1747766378, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "3117d06a9bd8efff3b13b6122d78e919acd7de091c142ce373ad3f8a5ab7c996", + "md5": "e8f337ccb2f9bc01dde53de3c051319f", + "sha1": "15e2b9ed18c5667bc36d113017e058f508201f65", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/jargon.exe.json b/lab_results/random_shellcode/jargon.exe.json new file mode 100644 index 0000000..db2b82e --- /dev/null +++ b/lab_results/random_shellcode/jargon.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NTlkM2I2NjIzYzAwYmJkYTNhYjg1NzRjY2JmMDRjYjE6MTc0Nzc2NjQ5Mw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NTlkM2I2NjIzYzAwYmJkYTNhYjg1NzRjY2JmMDRjYjE6MTc0Nzc2NjQ5Mw==", + "item": "https://www.virustotal.com/api/v3/files/b6e295f35cd1ceb2b91be179bd611e19a565eb655f1928cfed90fe20ac221c26" + }, + "attributes": { + "date": 1747766493, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "malicious", + "result": "PUA.RiskWare.Lsassdumper" + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "b6e295f35cd1ceb2b91be179bd611e19a565eb655f1928cfed90fe20ac221c26", + "md5": "59d3b6623c00bbda3ab8574ccbf04cb1", + "sha1": "99e9c43ef2f81e02c51e5c4ad1810021d7d1d428", + "size": 146944 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/jigsaw.exe.json b/lab_results/random_shellcode/jigsaw.exe.json new file mode 100644 index 0000000..e645a8b --- /dev/null +++ b/lab_results/random_shellcode/jigsaw.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZDNhNWQ5OGFjYzdiNDFhZjdlYTZkNjIyZDNhYjdlOTA6MTc0Nzc2NjUzMw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZDNhNWQ5OGFjYzdiNDFhZjdlYTZkNjIyZDNhYjdlOTA6MTc0Nzc2NjUzMw==", + "item": "https://www.virustotal.com/api/v3/files/25162962d4870a2e46fe0e8cc685514ebc92d16c7f35c7fc62a707a40c00624a" + }, + "attributes": { + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "date": 1747766533, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "25162962d4870a2e46fe0e8cc685514ebc92d16c7f35c7fc62a707a40c00624a", + "md5": "d3a5d98acc7b41af7ea6d622d3ab7e90", + "sha1": "5f4395f35ac069f1fec10b8ef02a297f85f101b0", + "size": 140288 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/noobfuscation.exe.json b/lab_results/random_shellcode/noobfuscation.exe.json new file mode 100644 index 0000000..54f0a28 --- /dev/null +++ b/lab_results/random_shellcode/noobfuscation.exe.json @@ -0,0 +1,634 @@ +{ + "data": { + "id": "ZDliZTgxOGM0M2QzNGIxOGIzNTQ3ZDVlYzVkMGVmMjY6MTc0Nzc2NjU3Ng==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZDliZTgxOGM0M2QzNGIxOGIzNTQ3ZDVlYzVkMGVmMjY6MTc0Nzc2NjU3Ng==", + "item": "https://www.virustotal.com/api/v3/files/59830e4a927aa6ad3de6daf65918703e873ce355dd2f9a0d5d251ce8165d82c1" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747766576, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "59830e4a927aa6ad3de6daf65918703e873ce355dd2f9a0d5d251ce8165d82c1", + "md5": "d9be818c43d34b18b3547d5ec5d0ef26", + "sha1": "99176f9f7d04f91264ec3cbc66c681cab8f1e361", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/offset.exe.json b/lab_results/random_shellcode/offset.exe.json new file mode 100644 index 0000000..6dacebc --- /dev/null +++ b/lab_results/random_shellcode/offset.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "MDAxNjY2MzgyZTExNjUwZmFmZDUwNTY5ZGY0MzVmZGQ6MTc0Nzc2NjYxNQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/MDAxNjY2MzgyZTExNjUwZmFmZDUwNTY5ZGY0MzVmZGQ6MTc0Nzc2NjYxNQ==", + "item": "https://www.virustotal.com/api/v3/files/51bc7cf625650f13c90605823e75049ef5761e5ff347eda1a8d586151484a38e" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747766615 + } + }, + "meta": { + "file_info": { + "sha256": "51bc7cf625650f13c90605823e75049ef5761e5ff347eda1a8d586151484a38e", + "md5": "001666382e11650fafd50569df435fdd", + "sha1": "4d4f04ec38f57b635fce663c972905c8df2d7167", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/rc4api.exe.json b/lab_results/random_shellcode/rc4api.exe.json new file mode 100644 index 0000000..fa02846 --- /dev/null +++ b/lab_results/random_shellcode/rc4api.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTEwNGU5OTE1N2NhOTY0MDEyZmFhYjBiZDI2NTYzOTY6MTc0Nzc2NjY1OA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTEwNGU5OTE1N2NhOTY0MDEyZmFhYjBiZDI2NTYzOTY6MTc0Nzc2NjY1OA==", + "item": "https://www.virustotal.com/api/v3/files/fccf4bef0e4baf87c186f5ce7217b20bd2425e3122eb8a8de2e1d679094354cd" + }, + "attributes": { + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "timeout", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "date": 1747766658, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 68, + "harmless": 0, + "timeout": 2, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "fccf4bef0e4baf87c186f5ce7217b20bd2425e3122eb8a8de2e1d679094354cd", + "md5": "e104e99157ca964012faab0bd2656396", + "sha1": "b77a68598b8210877d03b71d9dee411269c7b05c", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/reverse_byte_order.exe.json b/lab_results/random_shellcode/reverse_byte_order.exe.json new file mode 100644 index 0000000..da33ee9 --- /dev/null +++ b/lab_results/random_shellcode/reverse_byte_order.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ODk1YjFhMWQwMzY2NTljM2RmOTU5ZGMwMDE5ZjI3OTI6MTc0Nzc2NjczOQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ODk1YjFhMWQwMzY2NTljM2RmOTU5ZGMwMDE5ZjI3OTI6MTc0Nzc2NjczOQ==", + "item": "https://www.virustotal.com/api/v3/files/06b773b4ac86abedc474bb113e64c7ce68829618ba095f33368f3c37351edbae" + }, + "attributes": { + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "date": 1747766739 + } + }, + "meta": { + "file_info": { + "sha256": "06b773b4ac86abedc474bb113e64c7ce68829618ba095f33368f3c37351edbae", + "md5": "895b1a1d036659c3df959dc0019f2792", + "sha1": "c7add531c2405447f73eada8286158a120d6c8f9", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/reverse_hex_string.exe.json b/lab_results/random_shellcode/reverse_hex_string.exe.json new file mode 100644 index 0000000..2ff2876 --- /dev/null +++ b/lab_results/random_shellcode/reverse_hex_string.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NzUxOTc4ZDNmMjkxMDJiYzI2OTRkZTE2ZDdlMzBlZDk6MTc0Nzc2Njc4MQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NzUxOTc4ZDNmMjkxMDJiYzI2OTRkZTE2ZDdlMzBlZDk6MTc0Nzc2Njc4MQ==", + "item": "https://www.virustotal.com/api/v3/files/3e6b1dc6d94cabb1c89735dbcf24e2f85aa3b1e4e94c01fcad9e7ecb99b32e5f" + }, + "attributes": { + "date": 1747766781, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "3e6b1dc6d94cabb1c89735dbcf24e2f85aa3b1e4e94c01fcad9e7ecb99b32e5f", + "md5": "751978d3f29102bc2694de16d7e30ed9", + "sha1": "b1ca6e63cfd168fef12ccd7bc7fd2ce8083d2c4e", + "size": 141824 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/scan_results.txt b/lab_results/random_shellcode/scan_results.txt new file mode 100644 index 0000000..ad3a1b4 --- /dev/null +++ b/lab_results/random_shellcode/scan_results.txt @@ -0,0 +1,18 @@ +aes.exe: 5 +base64.exe: 3 +base64api.exe: 5 +bin2ip.exe: 8 +bin2mac.exe: 8 +caesar.exe: 2 +jargon.exe: 3 +jigsaw.exe: 2 +noobfuscation.exe: 2 +offset.exe: 2 +rc4api.exe: 2 +reverse_byte_order.exe: 2 +reverse_hex_string.exe: 2 +twoarray.exe: 2 +uuidapi.exe: 8 +xor_multibyte.exe: 1 +xor_reverse.exe: 2 +xor_single.exe: 1 diff --git a/lab_results/random_shellcode/twoarray.exe.json b/lab_results/random_shellcode/twoarray.exe.json new file mode 100644 index 0000000..dbff390 --- /dev/null +++ b/lab_results/random_shellcode/twoarray.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZWQwMmRkYzIzNGI2MTdlOTkyZmY0NmU1N2FjN2M0YzY6MTc0Nzc2NjgxNw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZWQwMmRkYzIzNGI2MTdlOTkyZmY0NmU1N2FjN2M0YzY6MTc0Nzc2NjgxNw==", + "item": "https://www.virustotal.com/api/v3/files/82e7eadcc4e0eeb7bb8e60f2cde44904fff8d71a9be8b7095c46aa55c43823b3" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "date": 1747766817 + } + }, + "meta": { + "file_info": { + "sha256": "82e7eadcc4e0eeb7bb8e60f2cde44904fff8d71a9be8b7095c46aa55c43823b3", + "md5": "ed02ddc234b617e992ff46e57ac7c4c6", + "sha1": "d84e3e8ba4c84abe62f56a43558712ab3f9fbe12", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/uuidapi.exe.json b/lab_results/random_shellcode/uuidapi.exe.json new file mode 100644 index 0000000..37bfe80 --- /dev/null +++ b/lab_results/random_shellcode/uuidapi.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZjZhYzkzMTI4YjFiMGM5NDRmNTU5ZmQ1ZjhjNWIwYTQ6MTc0Nzc2Njg1Mg==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZjZhYzkzMTI4YjFiMGM5NDRmNTU5ZmQ1ZjhjNWIwYTQ6MTc0Nzc2Njg1Mg==", + "item": "https://www.virustotal.com/api/v3/files/1eaa54e18b4837746885cdc98b1900281707d15484af488e55faf3c3c45dbd48" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (high confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "malicious", + "result": "Trojan.Win32.Save.a" + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_70% (D)" + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "malicious", + "result": "ti!1EAA54E18B48" + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "stats": { + "malicious": 8, + "suspicious": 0, + "undetected": 64, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "date": 1747766852 + } + }, + "meta": { + "file_info": { + "sha256": "1eaa54e18b4837746885cdc98b1900281707d15484af488e55faf3c3c45dbd48", + "md5": "f6ac93128b1b0c944f559fd5f8c5b0a4", + "sha1": "c636796f1a77f44ef69be732bd3226c2fbb8311e", + "size": 140288 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/xor_multibyte.exe.json b/lab_results/random_shellcode/xor_multibyte.exe.json new file mode 100644 index 0000000..862d093 --- /dev/null +++ b/lab_results/random_shellcode/xor_multibyte.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "MDMwZWRlZDI5MTg3YWRjYTcxOWJiMTBkMDFlYTUyZTY6MTc0Nzc2Njk0NA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/MDMwZWRlZDI5MTg3YWRjYTcxOWJiMTBkMDFlYTUyZTY6MTc0Nzc2Njk0NA==", + "item": "https://www.virustotal.com/api/v3/files/e085620f240f450b7154a1bbe95f6383581401ccf940479bf18a89d49fae1f9a" + }, + "attributes": { + "status": "completed", + "stats": { + "malicious": 1, + "suspicious": 0, + "undetected": 71, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747766944, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "e085620f240f450b7154a1bbe95f6383581401ccf940479bf18a89d49fae1f9a", + "md5": "030eded29187adca719bb10d01ea52e6", + "sha1": "fbffc789dcc05c260046d052428d36bab88ebaf3", + "size": 149504 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/xor_reverse.exe.json b/lab_results/random_shellcode/xor_reverse.exe.json new file mode 100644 index 0000000..76f2a3b --- /dev/null +++ b/lab_results/random_shellcode/xor_reverse.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZjY3ZGVlNjE4ODA1MTM2YTFkN2UzNDAzYmZjMjg5ZDk6MTc0Nzc2Njk4Ng==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZjY3ZGVlNjE4ODA1MTM2YTFkN2UzNDAzYmZjMjg5ZDk6MTc0Nzc2Njk4Ng==", + "item": "https://www.virustotal.com/api/v3/files/8573d88b680c496a2121e503f010f345a75cc53def656dda2b4ffd3f83264f57" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "date": 1747766986, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "8573d88b680c496a2121e503f010f345a75cc53def656dda2b4ffd3f83264f57", + "md5": "f67dee618805136a1d7e3403bfc289d9", + "sha1": "666e7b918691ca08b2bbb5642a18392d4107a737", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/xor_single.exe.json b/lab_results/random_shellcode/xor_single.exe.json new file mode 100644 index 0000000..45f728f --- /dev/null +++ b/lab_results/random_shellcode/xor_single.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "YTc5YWVjNmQ3YThkMDk3NmIyYTllNjRiNjQwYjBjZjU6MTc0Nzc2NzA3MA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/YTc5YWVjNmQ3YThkMDk3NmIyYTllNjRiNjQwYjBjZjU6MTc0Nzc2NzA3MA==", + "item": "https://www.virustotal.com/api/v3/files/dce65f4b9ee4329d759e090c995dc8281b9e2efd0da2f4db89e45896d7acd201" + }, + "attributes": { + "date": 1747767070, + "stats": { + "malicious": 1, + "suspicious": 0, + "undetected": 51, + "harmless": 0, + "timeout": 18, + "confirmed-timeout": 1, + "failure": 1, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "confirmed-timeout", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "timeout", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": null, + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "timeout", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": null, + "engine_update": "20250519", + "category": "timeout", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": null, + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "failure", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "dce65f4b9ee4329d759e090c995dc8281b9e2efd0da2f4db89e45896d7acd201", + "md5": "a79aec6d7a8d0976b2a9e64b640b0cf5", + "sha1": "b964e2215abff22e38d70ac2e1e6836707510548", + "size": 139776 + } + } +} \ No newline at end of file