YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash bcde9fe547e5ce0fb0f1b3552923d8aa4e4aeaffe239f1a51a3d77bfcaca1cf8.

Scan Results

SHA256 hash: bcde9fe547e5ce0fb0f1b3552923d8aa4e4aeaffe239f1a51a3d77bfcaca1cf8
File size:1'318'912 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 039253263f5ade39ebf2b49ce2a8a0d3
SHA1 hash: 812bef909d0e50b0f3629bf704702e6caabf766f
SHA3-384 hash: 86c0e50b8b34145262baf760a06a33c3217cbbf254c491f23e8bd9a22b9c1c636b1a67ac7ebfc0eceab6188efe1735a9
First seen:2025-11-21 18:59:16 UTC
Last seen:Never
Sightings:1
imphash : c54f40d6023142651a792ae38ae262de
Create hunting rule
ssdeep : 24576:Uz2DWRRbvAovtDSDmYDgnLmXwjCRvCbXp54:GvAokRgnqXwWhCbp54
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:2dbdac53-c70c-11f0-a73e-42010aa4000b
File name:039253263f5ade39ebf2b49ce2a8a0d3
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Win32.Expiro-3.UNOFFICIAL
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:NET
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.