Yagami[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Yagami.exe
Size

2.4MB
MD5

952d820b9c648d4e7a70e4ae78701e4d
SHA1

743693a3e7a6faa524438ce4ecab4bb424e54dfc
SHA256

86314f1b1004e693ef2d1bbdb399fa9410f56d9daf68a77ae72d1b50f84a9f6c
SHA512

91f55efa7a4215a58f78265212365f551d5329bfcf095e3512dbf1aa08ae380f5f2ab4144c4d9c2a08905a7ca3e9ad563230f6c144d853cbaa7ea3ba1f8324fd
SSDEEP

49152:D89Sti9ZmME9zD0fx/ZZWGNh8bu3kR6Zj2G2mfFtjd4qwp14m8P4LHLKrCczISJ3:D8EME930fxRZWymbuURGz2mfFtjKqwpo

Score

1^/10

Malware Config

Signatures

Files

Yagami.exe
.exe windows x86

a85fd43f82f101a81ba957578fac7522

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

qt5core

_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_ZN10QArrayData10deallocateEPS_jj
_ZN10QArrayData11shared_nullE
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStreamlsEPKc
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN11QTextStreamlsEi
_ZN16QCoreApplication9translateEPKcS1_S1_i
_ZN24QAbstractEventDispatcher23removeNativeEventFilterEP26QAbstractNativeEventFilter
_ZN24QAbstractEventDispatcher24installNativeEventFilterEP26QAbstractNativeEventFilter
_ZN24QAbstractEventDispatcher8instanceEP7QThread
_ZN26QAbstractNativeEventFilterC2Ev
_ZN26QAbstractNativeEventFilterD2Ev
_ZN4QDir8tempPathEv
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN4QUrlC1ERK7QStringNS_11ParsingModeE
_ZN4QUrlD1Ev
_ZN5QFile4copyERK7QStringS2_
_ZN6QDebug9putStringEPK5QCharj
_ZN6QDebugD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString16fromAscii_helperEPKci
_ZN7QString17fromLatin1_helperEPKci
_ZN7QString9fromUtf16EPKti
_ZN8QVariantC1Ei
_ZN8QVariantD1Ev
_ZN9QHashData11free_helperEPFvPNS_4NodeEE
_ZN9QHashData11shared_nullE
_ZN9QHashData12allocateNodeEi
_ZN9QHashData13detach_helperEPFvPNS_4NodeEPvEPFvS1_Eii
_ZN9QHashData6rehashEi
_ZN9QHashData8freeNodeEPv
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZN9QListData7disposeEPNS_4DataE
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK14QMessageLogger5debugEPKcz
_ZNK14QMessageLogger5debugEv
_ZNK14QMessageLogger7warningEv
_ZNK4QDir16absoluteFilePathERK7QString
_ZNK7QObject10objectNameEv
_ZNK7QString5utf16Ev

qt5gui

_ZN12QKeySequenceC1Eiiii
_ZN12QKeySequenceD1Ev
_ZN5QFont12setPointSizeEi
_ZN5QFontC1ERKS_
_ZN5QFontD1Ev
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN6QBrush8setStyleEN2Qt10BrushStyleE
_ZN6QBrushC1ERK6QColorN2Qt10BrushStyleE
_ZN6QBrushD1Ev
_ZN6QColor6setRgbEiiii
_ZN7QCursorC1EN2Qt11CursorShapeE
_ZN7QCursorD1Ev
_ZN8QPalette8setBrushENS_10ColorGroupENS_9ColorRoleERK6QBrush
_ZN8QPaletteC1Ev
_ZN8QPaletteD1Ev
_ZNK12QKeySequence7isEmptyEv
_ZNK12QKeySequence8toStringENS_14SequenceFormatE
_ZNK12QKeySequenceixEj

qt5multimedia

_ZN12QMediaPlayer4playEv
_ZN12QMediaPlayer4stopEv
_ZN12QMediaPlayer8setMediaERK13QMediaContentP9QIODevice
_ZN12QMediaPlayerC1EP7QObject6QFlagsINS_4FlagEE
_ZN13QMediaContentC1ERK4QUrl
_ZN13QMediaContentD1Ev

qt5widgets

_ZN10QBoxLayout10setSpacingEi
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QHBoxLayoutC1EP7QWidget
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QPushButtonC1EP7QWidget
_ZN11QVBoxLayoutC1EP7QWidget
_ZN12QApplication4execEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QTextBrowserC1EP7QWidget
_ZN15QAbstractButton10setCheckedEb
_ZN15QAbstractButton7setTextERK7QString
_ZN15QAbstractSlider10setMaximumEi
_ZN15QAbstractSlider10setMinimumEi
_ZN15QAbstractSlider11setTrackingEb
_ZN15QAbstractSlider14setOrientationEN2Qt11OrientationE
_ZN15QAbstractSlider8setValueEi
_ZN6QLabel7setTextERK7QString
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QAction7setTextERK7QString
_ZN7QActionC1EP7QObject
_ZN7QDialog10closeEventEP11QCloseEvent
_ZN7QDialog10setVisibleEb
_ZN7QDialog11eventFilterEP7QObjectP6QEvent
_ZN7QDialog11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QDialog11qt_metacastEPKc
_ZN7QDialog11resizeEventEP12QResizeEvent
_ZN7QDialog13keyPressEventEP9QKeyEvent
_ZN7QDialog16contextMenuEventEP17QContextMenuEvent
_ZN7QDialog16staticMetaObjectE
_ZN7QDialog4doneEi
_ZN7QDialog4execEv
_ZN7QDialog4openEv
_ZN7QDialog6acceptEv
_ZN7QDialog6rejectEv
_ZN7QDialog9showEventEP10QShowEvent
_ZN7QDialogC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN7QDialogD2Ev
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QSliderC1EP7QWidget
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setPaletteERK8QPalette
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11nativeEventERK10QByteArrayPvPl
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13setStyleSheetERK7QString
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setMaximumSizeEii
_ZN7QWidget14setMinimumSizeEii
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16setWindowOpacityEd
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget4showEv
_ZN7QWidget5eventEP6QEvent
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7setFontERK5QFont
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setCursorERK7QCursor
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN9QCheckBoxC1EP7QWidget
_ZN9QComboBox10insertItemEiRK5QIconRK7QStringRK8QVariant
_ZN9QComboBoxC1EP7QWidget
_ZN9QGroupBox8setTitleERK7QString
_ZN9QGroupBoxC1EP7QWidget
_ZN9QTextEdit7setHtmlERK7QString
_ZNK7QDialog15minimumSizeHintEv
_ZNK7QDialog8sizeHintEv
_ZNK7QWidget10redirectedEP6QPoint
_ZNK7QWidget11initPainterEP8QPainter
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget13sharedPainterEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget17hasHeightForWidthEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK9QComboBox5countEv
_ZNK9QComboBox8itemDataEii
_ZThn8_NK7QWidget10redirectedEP6QPoint
_ZThn8_NK7QWidget11initPainterEP8QPainter
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget13sharedPainterEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv

libgcc_s_dw2-1

_Unwind_Resume
__deregister_frame_info
__divdi3
__register_frame_info

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
rand
signal
srand
strcmp
strlen
strncmp
time
vfprintf

libwinpthread-1

nanosleep
pthread_equal

shell32

CommandLineToArgvW

user32

CallNextHookEx
CloseDesktop
EnumDesktopWindows
FindWindowW
GetAsyncKeyState
GetCursorPos
GetForegroundWindow
GetLastInputInfo
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
IsWindowVisible
OpenInputDesktop
RegisterHotKey
SendInput
SetWindowsHookExW
UnregisterHotKey
WindowFromPoint

libstdc++-6

_ZNKSt9type_infoeqERKS_
_ZNSt6thread15_M_start_threadESt10shared_ptrINS_10_Impl_baseEE
_ZNSt6thread6detachEv
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZSt9terminatev
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_begin_catch
__cxa_end_catch
__cxa_pure_virtual
__cxa_rethrow
__cxa_throw_bad_array_new_length
__gxx_personality_v0

Exports

Exports

_Z10qxtVersionv
_ZN17QxtGlobalShortcut10setEnabledEb
_ZN17QxtGlobalShortcut11qt_metacallEN11QMetaObject4CallEiPPv
_ZN17QxtGlobalShortcut11qt_metacastEPKc
_ZN17QxtGlobalShortcut11setDisabledEb
_ZN17QxtGlobalShortcut11setShortcutERK12QKeySequence
_ZN17QxtGlobalShortcut16staticMetaObjectE
_ZN17QxtGlobalShortcut18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN17QxtGlobalShortcut9activatedEv
_ZN17QxtGlobalShortcutC1EP7QObject
_ZN17QxtGlobalShortcutC1ERK12QKeySequenceP7QObject
_ZN17QxtGlobalShortcutC2EP7QObject
_ZN17QxtGlobalShortcutC2ERK12QKeySequenceP7QObject
_ZN17QxtGlobalShortcutD0Ev
_ZN17QxtGlobalShortcutD1Ev
_ZN17QxtGlobalShortcutD2Ev
_ZNK17QxtGlobalShortcut10metaObjectEv
_ZNK17QxtGlobalShortcut8shortcutEv
_ZNK17QxtGlobalShortcut9isEnabledEv
_ZTI17QxtGlobalShortcut
_ZTV17QxtGlobalShortcut

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a85fd43f82f101a81ba957578fac7522

Headers

File Characteristics

Imports

qt5core

qt5gui

qt5multimedia

qt5widgets

libgcc_s_dw2-1

kernel32

msvcrt

libwinpthread-1

shell32

user32

libstdc++-6

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 30KB

.data Size: 512B - Virtual size: 136B

.rdata Size: 2.4MB - Virtual size: 2.4MB

.eh_fram Size: 8KB - Virtual size: 7KB

.bss Size: - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 13KB - Virtual size: 13KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 31KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 136B

.rdata
Size: 2.4MB - Virtual size: 2.4MB

.eh_fram
Size: 8KB - Virtual size: 7KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 13KB - Virtual size: 13KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 3KB - Virtual size: 2KB