| SHA256: | 35606fa83bfe98d4cfd65c5b5506b30c5bf2adc90327eb64eaa7c81d9f5e71aa |
| 檔案名稱: | YaTQA-Setup_3.7-rc2.exe |
| 偵測率: | 0 / 55 |
| 分析日期: | 2016-12-18 21:26:21 UTC ( 1 年, 4 月 前 ) 檢視最新 |
| 防毒 | 結果 | 更新 |
|---|---|---|
| Ad-Aware | 20161218 | |
| AegisLab | 20161217 | |
| AhnLab-V3 | 20161218 | |
| Alibaba | 20161216 | |
| ALYac | 20161218 | |
| Antiy-AVL | 20161218 | |
| Arcabit | 20161218 | |
| Avast | 20161218 | |
| AVG | 20161218 | |
| Avira (no cloud) | 20161218 | |
| AVware | 20161218 | |
| Baidu | 20161207 | |
| BitDefender | 20161218 | |
| Bkav | 20161217 | |
| CAT-QuickHeal | 20161217 | |
| ClamAV | 20161218 | |
| CMC | 20161218 | |
| Comodo | 20161218 | |
| CrowdStrike Falcon (ML) | 20161024 | |
| Cyren | 20161218 | |
| DrWeb | 20161218 | |
| Emsisoft | 20161218 | |
| ESET-NOD32 | 20161218 | |
| F-Prot | 20161218 | |
| F-Secure | 20161218 | |
| Fortinet | 20161218 | |
| GData | 20161218 | |
| Ikarus | 20161218 | |
| Sophos ML | 20161216 | |
| Jiangmin | 20161218 | |
| K7AntiVirus | 20161218 | |
| K7GW | 20161218 | |
| Kaspersky | 20161218 | |
| Kingsoft | 20161218 | |
| Malwarebytes | 20161218 | |
| McAfee | 20161218 | |
| McAfee-GW-Edition | 20161218 | |
| Microsoft | 20161218 | |
| eScan | 20161218 | |
| NANO-Antivirus | 20161218 | |
| nProtect | 20161218 | |
| Panda | 20161218 | |
| Qihoo-360 | 20161218 | |
| Rising | 20161218 | |
| Sophos AV | 20161218 | |
| SUPERAntiSpyware | 20161218 | |
| Symantec | 20161218 | |
| Tencent | 20161218 | |
| TheHacker | 20161214 | |
| TrendMicro | 20161218 | |
| TrendMicro-HouseCall | 20161218 | |
| Trustlook | 20161218 | |
| VBA32 | 20161216 | |
| VIPRE | 20161218 | |
| ViRobot | 20161218 | |
| WhiteArmor | 20161212 | |
| Yandex | 20161217 | |
| Zillya | 20161216 | |
| Zoner | 20161218 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
Packers identified
F-PROT NSIS
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2014-05-11 20:03:36
Entry Point 0x00003217
Number of sections 5
PE sections
Overlays
MD5 05e6ccd239617df5a09b6f513c7002cb
File type data
Offset 49152
Size 1279771
Entropy 8.00
PE imports
Number of PE resources by type
RT_ICON 7
RT_DIALOG 6
RT_BITMAP 1
RT_GROUP_ICON 1
RT_MANIFEST 1
Number of PE resources by language
ENGLISH US 16
PE resources
ExifTool file metadata
MIMEType
application/octet-stream
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
FileTypeExtension
exe
TimeStamp
2014:05:11 21:03:36+01:00
FileType
Win32 EXE
PEType
PE32
CodeSize
23552
LinkerVersion
6.0
EntryPoint
0x3217
InitializedDataSize
117760
SubsystemVersion
4.0
ImageVersion
6.0
OSVersion
4.0
UninitializedDataSize
1024
File identification
MD5 6ab7f7a9a54ade7fee02588891c21c99
SHA1 a38903747e1b8097877bef9ca7b5185c6e14e2cc
SHA256 35606fa83bfe98d4cfd65c5b5506b30c5bf2adc90327eb64eaa7c81d9f5e71aa
ssdeep
24576:KrB7s5QNSZW40HeTKWOHuQf2j5dzh/PO37AZimL3ogrUuPwjYo:yB7s5QNov0+vOt2j5LkQJzogrSjT
File size
1.3 MB ( 1328923 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
NSIS - Nullsoft Scriptable Install System (91.9%) Win32 Executable MS Visual C++ (generic) (3.3%) Win64 Executable (generic) (3.0%) Win32 Dynamic Link Library (generic) (0.7%) Win32 Executable (generic) (0.4%) |
Tags
nsis
peexe
overlay
VirusTotal metadata
First submission
2016-12-18 21:26:21 UTC ( 1 年, 4 月 前 )
Last submission
2016-12-18 21:26:21 UTC ( 1 年, 4 月 前 )
| 檔案名稱 |
YaTQA-Setup_3.7-rc2.exe |
沒有投票.
尚未有人對此項目投票，您將是第一個這樣做!
Condensed report! The following is a condensed report of the
behaviour of the file when executed in a controlled environment. The actions
and events described were either performed by the file itself or by any other
process launched by the executed file or subjected to code injection by the
executed file.