🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 00a14ab10b37f85821389373ef4e1677217ec7a522453d76bba8041dd689ceb5.

Scan Results

SHA256 hash: 00a14ab10b37f85821389373ef4e1677217ec7a522453d76bba8041dd689ceb5
File size:38'012 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: c35c065664ba39961dc548da57affc94
SHA1 hash: c27529390841494c50a72e125a34e1c81868b83b
SHA3-384 hash: 3806e70d8a8cf324057dd2c7b9a309e1a9a763d58a5e16ef8b4c1d3d5d97b2ae27499112820c46cb198c924ca4d2735d
First seen:2026-09-09 02:39:30 UTC
Last seen:Never
Sightings:1
imphash : b0452ae386a86c5ff72f6fb10b3aeb1c
Create hunting rule
ssdeep : 192:zswdRCNCE8YPWowHHKv49axL3pkK/qKWFL1D/EswdRCNCE8YPWoNHaN2n+M:zPHCU3Y+YvbL3ibKm+PHCU3Y+BNy+M
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:aecaeec2-abf7-11f1-b69f-42010aa4000b
File name:400000.750be8d1-088c-4a05-b97c-d804a6eb5f33.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Packer.Mingwin32Gcc-1
Create hunting rule
Signature:PUA.Win.Packer.Mingwin32Gcc-2
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:UPX
Create hunting rule
Author:kevoreilly
Description:UPX Unpacker: dump on OEP (original entry point)
TLP:TLP:WHITE
Repository:CAPE
Rule name:UPX20030XMarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXv20MarkusLaszloReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:VECT_Ransomware
Create hunting rule
Author:Mustafa Bakhit
Description:Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.