YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 01b4dee12125ea134a70fbb541d032cc8a5cb7d817021d0017ae47803cbe7f03.

Scan Results

SHA256 hash: 01b4dee12125ea134a70fbb541d032cc8a5cb7d817021d0017ae47803cbe7f03
File size:479'232 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: e494ff2aa8994e002c0e27986314a51b
SHA1 hash: 772fa260caea5041310d9c23cb73bc6c3787ad21
SHA3-384 hash: 9e5252457100acf59cca343ec3dfdcc5f2317523b3fd96657e1864582f78a3b4c10d91fe91d027ab758531cc3d23ce6f
First seen:2026-08-11 16:28:10 UTC
Last seen:Never
Sightings:1
imphash : 5d6cad172c5535e4b6b6bbd246571621
Create hunting rule
ssdeep : 3072:5zFjrnlRq6IUKujGkrsSYkBp8QC0jyHDUHLLH/MHY9rddd4SoDEaoF76F:5z9nanUKcrPYkBAHIfdrddd4TgaoF
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:a4354b85-95a1-11f1-bf07-42010aa4000b
File name:400000.Unicorn-14970.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Dropper.Ajku-10014126-0
Create hunting rule
Signature:Win.Dropper.Vbclone-10036195-0
Create hunting rule
Signature:Win.Malware.Generickdz-10004857-0
Create hunting rule
Signature:Win.Packed.Generic-9967832-0
Create hunting rule
Signature:Win.Trojan.Barys-10005825-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.