YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 122fa2abc8acba036399fc62e1c369c981fc96a7974aab1b94d54650590165cd.

Scan Results


SHA256 hash: 122fa2abc8acba036399fc62e1c369c981fc96a7974aab1b94d54650590165cd
File size:93'548 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 07102c39fab242981d1e87bc432c57a7
SHA1 hash: e598fa55d9190d31ba158bd5d0e4e9cff3e71598
SHA3-384 hash: 22d6defa1a0af6d44202c7c2277e1cea40e22a78c51a564b61e6f436b1e19f65757bac41bd5a797d5db6e14bea10f2f2
First seen:2025-11-21 00:00:18 UTC
Last seen:Never
Sightings:1
imphash : edf96c54ebcf8b2f82d2331be5c42e58
ssdeep : 1536:IFAutcCNS1mgnd2y1nrPlGiCcCBEfFAutcCNS1mgnd2y1nrPlGiCcCBEF:IpWC4YgBPlGiyypWC4YgBPlGiy8
TLSH : T16B93F15CD89D2CD2FD8AACB584F2CF34323B917193FD811859AA34B3D48828B6511F2D
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:110a3f1b-c66d-11f0-adeb-42010aa4000b
File name:07102c39fab242981d1e87bc432c57a7
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Packer.Petite-1
Signature:PUA.Win.Packer.Petite-10
Signature:PUA.Win.Packer.Petite-14
Signature:PUA.Win.Packer.Petite-2
Signature:PUA.Win.Packer.Petite-27
Signature:SecuriteInfo.com.Trojan.GenericKD.46546358.22309.2861.UNOFFICIAL
Signature:Win.Malware.Brontok-10037995-0
Signature:Win.Worm.Brontok-9936812-0

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Petitev211
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:PEtitev22
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.