YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 78b31bbfdec51be6657fa7b18a20fd299b3a6695d71f22debf41af3aceafc8dc.

Scan Results

SHA256 hash: 78b31bbfdec51be6657fa7b18a20fd299b3a6695d71f22debf41af3aceafc8dc
File size:14'336 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 12118f85e3036ef7ccbf38feb939c858
SHA1 hash: 6e80f76a488dc7f14e44fd9cc210cb82a15c2d60
SHA3-384 hash: 4bd06c6e035e50f01d3d338b1e12cebaadd21ea17d601f39bc01642563bfe8d2f1ff656abb6f2fa384668410ff3431a2
First seen:2025-11-21 18:56:46 UTC
Last seen:Never
Sightings:1
imphash : f34d5f2d4577ed6d9ceec516c1f5a744
Create hunting rule
ssdeep : 384:q99q3grLqtWy0OC12Mj7Cy0y7S6ck8ha2H94RdGH+IN:q992KLsr0OC2MHS6N2H9YdSZN
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:d4610a06-c70b-11f0-a73e-42010aa4000b
File name:12118f85e3036ef7ccbf38feb939c858
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Beebone-8273946-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:NETexecutableMicrosoft
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:pe_imphash
Create hunting rule
TLP:TLP:WHITE
Repository:MalwareBazaar
Rule name:Skystars_Malware_Imphash
Create hunting rule
Author:Skystars LightDefender
Description:imphash
TLP:TLP:WHITE
Repository:MalwareBazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.