YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 99c4b57eaa06b5e5f40c5b4ff2ef09f0e4d2576dad4f110bdb7f40b2795b530a.

Scan Results

SHA256 hash: 99c4b57eaa06b5e5f40c5b4ff2ef09f0e4d2576dad4f110bdb7f40b2795b530a
File size:380'928 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 09a7514f85af1d858b61c0f188713b0f
SHA1 hash: f43751ab536285b665031aa4c637c0c4e1a7ccf4
SHA3-384 hash: cefd6b29a81d7b8832c8a6fa6da4990f86c7a8df0da0c8df5e2def12270e0116de00eeb404ae6c98e9baebe8215f3299
First seen:2025-11-21 19:03:05 UTC
Last seen:Never
Sightings:1
imphash : 2e1947c59ff7ee8c037382d0a0aec05a
Create hunting rule
ssdeep : 6144:t+dgUkQx+HXGidCzj8LBb8Rw5Jdypyf6aCXYfhiO:tUqQx+H2i+8LBNbdypazCXY
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 04dc9aaa92cec454
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:b5e970d0-c70c-11f0-a73e-42010aa4000b
File name:09a7514f85af1d858b61c0f188713b0f
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Dropper.Remcos-9981045-1
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.