YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 19568f44338cae378753ecbc0ccd60b694fd10f3ea76c25a1d62a0ea18210d07.

Scan Results

SHA256 hash: 19568f44338cae378753ecbc0ccd60b694fd10f3ea76c25a1d62a0ea18210d07
File size:3'442'366 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 01ec45d8af7c611de7ebea6abde8003f
SHA1 hash: 5e7812364bf9ebf53900d1b4ea5e8110bb2130db
SHA3-384 hash: c09085d129aa9bf0e6718ba3a5de4e0796fab2b71748664605da6d42e696811a295e8449d1e0e3aacde2486a360065fd
First seen:2026-03-13 19:24:55 UTC
Last seen:Never
Sightings:1
imphash : b941ddedcc51e5706d41335adb4e6b2a
Create hunting rule
ssdeep : 49152:TakOElMaFLkvc9IW1dXgfC/MHmgmHF+3j5D78OBUarGfT56rX:Tak70c9IW1dXgfC/MHmgmCs15ErX
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : b6caeab2eac8e871
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:50f550f5-1f12-11f1-b47f-42010aa4000b
File name:01ec45d8af7c611de7ebea6abde8003f
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Packer.Aspack-29
Create hunting rule
Signature:PUA.Win.Packer.Aspack-30
Create hunting rule
Signature:SecuriteInfo.com.Trojan.GenericKD.35061526.11338.16144.UNOFFICIAL
Create hunting rule
Signature:Win.Packed.Pidgeon-9909600-0
Create hunting rule
Signature:Win.Ransomware.Azov-10057824-0
Create hunting rule
Signature:Win.Ransomware.Azvo-9978000-0
Create hunting rule
Signature:Win.Trojan.Generic-9862772-0
Create hunting rule
Signature:Win.Worm.Pajetbin-6726648-0
Create hunting rule
Signature:Win.Worm.Vindor-9886047-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify
Rule name:INDICATOR_EXE_Packed_ASPack
Create hunting rule
Author:ditekSHen
Description:Detects executables packed with ASPack
TLP:TLP:WHITE
Repository:diˈtekSHən
Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.