YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash e883b1b252f53d40e812128557102abc37c79ca1cfb50e1baa46579eae2e45ef.

Scan Results

SHA256 hash: e883b1b252f53d40e812128557102abc37c79ca1cfb50e1baa46579eae2e45ef
File size:65'491 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 127e25776797ab8fd810d32bcbe90151
SHA1 hash: 479ab7cab1432dc5cfff9d333231b63c0161cc47
SHA3-384 hash: b282775a0a7eb6b1c99d924c542001b6a31ab5f1449f3677b0b76d7df1b541ac13eeab0e1253a20d51cd36da8a64c2e4
First seen:2025-11-21 18:59:10 UTC
Last seen:Never
Sightings:1
imphash : fefa7ca933cb2a0a4143c7bf848eb035
Create hunting rule
ssdeep : 768:DncyD+Gr0nZgiLRVtrDpl8uQiuuHYgPT1wq1F4aoAJPGOfY3Wc6hcRNQjUfJiNca:Dnv5rkzRV9pq+uPUT1NAZ3W0NQEJM/
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:29daeb7e-c70c-11f0-a73e-42010aa4000b
File name:127e25776797ab8fd810d32bcbe90151
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Tedy-10044415-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.