YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 77e5a2409a54c2125ada4ab46bc6ae6fe53757b2f402d514ecaef7b3887f49b4.

Scan Results

SHA256 hash: 77e5a2409a54c2125ada4ab46bc6ae6fe53757b2f402d514ecaef7b3887f49b4
File size:1'097'072 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 03f91043cefd87b0bd03bdb2dc65392b
SHA1 hash: f3ffb554f52826945c85ff0b5c09483a2d748e13
SHA3-384 hash: c0bd013b7ae8a4f8d35baf419a7168c251de6a9772ea1da35c0b8e38d445e64dd1d0137be7f6f4bca49d9163978e6be4
First seen:2025-11-21 19:00:56 UTC
Last seen:Never
Sightings:1
imphash : b34f154ec913d2d2c435cbd644e91687
Create hunting rule
ssdeep : 768:ur+nWI+c1t64d/ZuFvg0Y9v1zZyAfdr6rMKtYbO0D3imIeIo/GDpauUbb:s+nQc1w4vuFv0hEe2+bO0DEtauUbb
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : b2a89c96a2cada72
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:69750487-c70c-11f0-a73e-42010aa4000b
File name:03f91043cefd87b0bd03bdb2dc65392b
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Detect_NSIS_Nullsoft_Installer
Create hunting rule
Author:Obscurity Labs LLC
Description:Detects NSIS installers by .ndata section + NSIS header string
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.