YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash e40b7dee37e25ddf838c9c8c4eace097056ec45e2ec87b9160ff8e401711a077.

SHA256 hash:	e40b7dee37e25ddf838c9c8c4eace097056ec45e2ec87b9160ff8e401711a077
File size:	768'000 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	90701f561c77c5c64f58586e876309f3
SHA1 hash:	de86a9b3d09ca363158ce1d4e9383bd374d6e5f6
SHA3-384 hash:	575dcd54117bcae96d58a9e2ddf7f0ede9f31158b0f8c19c604c407d3ede68f016d94f50c92b7dec6d10340411f57230
First seen:	2025-12-26 20:41:02 UTC
Last seen:	Never
Sightings:	1
imphash :	5271d5ce8b44dd47bc92563e27585466 Create hunting rule
ssdeep :	12288:aMmCy3DsbVnkCaEeNEkT9Hhp0k2DV8ZPlL5WrGsh/AXzcvxVNGBXEZf5Ne:1mCy36kYgEkZHhpd2h8Zh5gJhfV95
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	CP_Script_Inject_Detector Create hunting rule
Author:	DiegoAnalytics
Description:	Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	DebuggerException__SetConsoleCtrl Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-12-26 20:41:03 UTC Static: 4 Unpacker: 0 ClamAV: 0