YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 97017ce054b0dc450e84e488c065b40da4ccf22c77b3db28ee5ca777a1ac29ce.

Scan Results


SHA256 hash: 97017ce054b0dc450e84e488c065b40da4ccf22c77b3db28ee5ca777a1ac29ce
File size:1'429'223 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 09fabd19da88044c3fbbd12c09e5db99
SHA1 hash: 472284dd9786416f2da3cd8772fe76eea9c1b10f
SHA3-384 hash: ad0510175606381363db3426a58e2f97bb8070571a0675decb16a35f60c0dd47bd724c493f9a87b9a3fd0d6a2647e06c
First seen:2025-11-21 18:57:25 UTC
Last seen:Never
Sightings:1
imphash : 6d5d84d2f024a2d1307b9d8c6b474103
ssdeep : 24576:g72zF72zs72zF72z472zF72z472zF72zh:g7K7j7K7p7K7p7K7u
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 01ccc4d0c4f47c02

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:eba7a63c-c70b-11f0-a73e-42010aa4000b
File name:09fabd19da88044c3fbbd12c09e5db99
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Lunam-6749633-0
Signature:Win.Trojan.Lunam-1
Signature:Win.Trojan.Lunam-3
Signature:Win.Virus.Otfrem-9939925-0

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.