YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 059290dde8c156fbded5ed7eb8848996fbe55b73d6d831989c01932e790a4146.

Scan Results


SHA256 hash: 059290dde8c156fbded5ed7eb8848996fbe55b73d6d831989c01932e790a4146
File size:15'360 bytes
File download: Original
MIME type:application/CDFV2
MD5 hash: 34cd5e40ddb76f700705849b88ebb9f1
SHA1 hash: 5f45014b3973c285fe5b2af220d0a2be17a435a1
SHA3-384 hash: f4a2c78703a6660a45b17abbb6e33299acdc34c0f27f4c32de18c8ab7a3bafb3084eb30e61e646bc2429f95b85e8fa63
First seen:2023-01-25 09:34:06 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 192:mmN1erW/5hKNkz8RvS5t2S+G4otRJe7Oa:mA1eryENkz8RvS5kG/nJ
TLSH : T148624F083F56CA52E154CE370DD2EAE7E735BC81EE5582077288772F1EB9664C80E606
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


You can browse the 10 most recent tasks associated with this file blow.

Task Information


Task ID:69cb5b57-9c93-11ed-98c2-42010aa4000b
File name:vbaProject.bin
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:informational_win_ole_protected
Author:Jeff White (karttoon@gmail.com) @noottrak
Description:Identify OLE Project protection within documents.
TLP:TLP:WHITE
Repository:karttoon

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.