YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 77118643b602f984fbd0e9b9bb964b5a7776895c64f4a75e856eb3b39af4564c.

Scan Results

SHA256 hash: 77118643b602f984fbd0e9b9bb964b5a7776895c64f4a75e856eb3b39af4564c
File size:401'307 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0dd04a74bffc54cbb36bf817c752c2d8
SHA1 hash: 3a1d1a2a7018f283ed6875f48890df4bbf5d1141
SHA3-384 hash: c3cbce8143e1354974e52b24af771954d2951bf1a4ba3d8e1f4fb9ff62b350726185a4e17dbc26f40e8e4b5acf336535
First seen:2025-11-21 19:01:57 UTC
Last seen:Never
Sightings:1
imphash : 87bed5a7cba00c7e1f4015f1bdae2183
Create hunting rule
ssdeep : 6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/blb:Os52hzpHq8eTi30yIQrDlb
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:8d668d97-c70c-11f0-a73e-42010aa4000b
File name:0dd04a74bffc54cbb36bf817c752c2d8
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Packer.Beroexepacker-2
Create hunting rule
Signature:PUA.Win.Packer.Beroexepacker-3
Create hunting rule
Signature:SecuriteInfo.com.Adware.Gator.444.UNOFFICIAL
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:BeRoEXEPackerV100BeRo
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.