| SHA256: | cd4ebae960ddff71a70c4922598ff0ad6201089ff415cbbc581ce5c934fcea48 |
| Nome do arquivo: | yatqa.exe |
| Taxa de detecção: | 0 / 54 |
| Data da análise: | 2016-09-13 07:54:04 UTC ( 2 anos, 7 meses atrás ) Visualizar últimos |
| Antivírus | Resultado | Atualização |
|---|---|---|
| Ad-Aware | 20160913 | |
| AegisLab | 20160913 | |
| AhnLab-V3 | 20160913 | |
| Alibaba | 20160913 | |
| Antiy-AVL | 20160913 | |
| Arcabit | 20160913 | |
| Avast | 20160913 | |
| AVG | 20160913 | |
| Avira (no cloud) | 20160913 | |
| Baidu | 20160913 | |
| BitDefender | 20160913 | |
| Bkav | 20160912 | |
| CAT-QuickHeal | 20160913 | |
| ClamAV | 20160913 | |
| CMC | 20160912 | |
| Comodo | 20160912 | |
| Cyren | 20160913 | |
| DrWeb | 20160913 | |
| Emsisoft | 20160913 | |
| ESET-NOD32 | 20160913 | |
| F-Prot | 20160913 | |
| F-Secure | 20160913 | |
| Fortinet | 20160913 | |
| GData | 20160913 | |
| Ikarus | 20160912 | |
| Sophos ML | 20160912 | |
| Jiangmin | 20160913 | |
| K7AntiVirus | 20160913 | |
| K7GW | 20160913 | |
| Kaspersky | 20160913 | |
| Kingsoft | 20160913 | |
| Malwarebytes | 20160913 | |
| McAfee | 20160913 | |
| McAfee-GW-Edition | 20160912 | |
| Microsoft | 20160913 | |
| eScan | 20160913 | |
| NANO-Antivirus | 20160913 | |
| nProtect | 20160913 | |
| Panda | 20160912 | |
| Qihoo-360 | 20160913 | |
| Rising | 20160913 | |
| Sophos AV | 20160913 | |
| SUPERAntiSpyware | 20160913 | |
| Symantec | 20160913 | |
| Tencent | 20160913 | |
| TheHacker | 20160911 | |
| TrendMicro | 20160913 | |
| TrendMicro-HouseCall | 20160913 | |
| VBA32 | 20160912 | |
| VIPRE | 20160913 | |
| ViRobot | 20160913 | |
| Yandex | 20160911 | |
| Zillya | 20160912 | |
| Zoner | 20160913 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright © 2011-2015 ?edeemer
Product YaTQA
Original name yatqa.exe
Internal name TS3Telnet
File version 3.6.0.0
Description Yet another TeamSpeak³ Query App
Comments JN-GAMES Software Deutschland rulez!
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2016-08-30 13:18:59
Entry Point 0x0020E168
Number of sections 9
PE sections
PE imports
Number of PE resources by type
PNG 419
RT_RCDATA 72
RT_STRING 60
RT_ICON 4
CSV 4
TXT 2
RT_DIALOG 2
HTM 2
RT_GROUP_CURSOR 1
RT_MANIFEST 1
RT_BITMAP 1
RT_CURSOR 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
GERMAN 434
NEUTRAL 133
ENGLISH US 4
PE resources
ExifTool file metadata
SubsystemVersion
5.0
Comments
JN-GAMES Software Deutschland rulez!
InitializedDataSize
892416
ImageVersion
0.0
FileSubtype
0
FileVersionNumber
3.6.0.0
LanguageCode
German
FileFlagsMask
0x003f
FileDescription
Yet another TeamSpeak Query App
CharacterSet
Windows, Latin1
LinkerVersion
2.25
EntryPoint
0x20e168
OriginalFileName
yatqa.exe
MIMEType
application/octet-stream
LegalCopyright
Copyright 2011-2015 edeemer
FileVersion
3.6.0.0
TimeStamp
2016:08:30 14:18:59+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
TS3Telnet
ProductVersion
1.0.0.0
UninitializedDataSize
0
OSVersion
5.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
JN-GAMES Software
CodeSize
2151424
ProductName
YaTQA
ProductVersionNumber
3.6.0.0
FileTypeExtension
exe
ObjectFileType
Executable application
Execution parents
Compressed bundles
File identification
MD5 cafe15dbaedeca81c00d253d63b2f614
SHA1 2e4c0754825689405eb810d0d485670289b51b64
SHA256 cd4ebae960ddff71a70c4922598ff0ad6201089ff415cbbc581ce5c934fcea48
ssdeep
24576:vzAvwB4hzrU+0r9FilRTo/YjsexzdRhJ91OdQ+zjobp3mujscbckrl6kwX2URbfZ:qvjQzwp35jscwiM2CbKZEuqrDThzAOi
File size
2.9 MB ( 3044864 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Executable Delphi generic (37.4%) Windows screen saver (34.5%) Win32 Executable (generic) (11.9%) Win16/32 Executable Delphi generic (5.4%) Generic Win/DOS Executable (5.2%) |
Tags
peexe
VirusTotal metadata
First submission
2016-09-02 19:08:46 UTC ( 2 anos, 7 meses atrás )
Last submission
2017-03-10 22:42:37 UTC ( 2 anos, 1 mês atrás )
| Nomes do arquivo |
yatqa.exe yatqa.exe yatqa.exe yatqa.exe yatqa.exe yatqa.exe yatqa.exe TS3Telnet yatqa.exe 741818 |
Sem comentários.
Ainda nenhum membro da Comunidade VirusTotal comentou este item, seja o primeiro!
Você ainda não entrou. Apenas usuários registrados podem comentar, entre e expresse-se!
Sem votos.
Ainda nenhum usuário votou neste item, seja o primeiro!
Condensed report! The following is a condensed report of the
behaviour of the file when executed in a controlled environment. The actions
and events described were either performed by the file itself or by any other
process launched by the executed file or subjected to code injection by the
executed file.