YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 1c6e0933882a4601bca0519099a03e7848c12ee44f7e81b37e99e20f386c50c6.

SHA256 hash:	1c6e0933882a4601bca0519099a03e7848c12ee44f7e81b37e99e20f386c50c6
File size:	1'956'689 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	1215738cb087e4260def3dd0b0fd5992
SHA1 hash:	3e634b2022737ed6f1cee7c597cbcb58341583b9
SHA3-384 hash:	2d90580ff0977d1dc95fa43bd8dae2978882f726786d41dad0f23a623f9cd34472ce6744c3cf9d32c5fbf61f9408fb79
First seen:	2026-01-15 15:29:16 UTC
Last seen:	Never
Sightings:	1
imphash :	ac4ded70f85ef621e5f8917b250855be Create hunting rule
ssdeep :	49152:nN61T1mhbwXCip+JRj42qipgbhFv0atAJQzdiSd:nN66h+p+Jpfq1kIyQzdBd
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	5050d270cccc82ae Create hunting rule

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	CP_Script_Inject_Detector Create hunting rule
Author:	DiegoAnalytics
Description:	Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	pe_detect_tls_callbacks Create hunting rule
Author:
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	SHA512_Constants Create hunting rule
Author:	phoul (@phoul)
Description:	Look for SHA384/SHA512 constants
TLP:	TLP:WHITE
Repository:

Rule name:	shellcode Create hunting rule
Author:	nex
Description:	Matched shellcode byte patterns
TLP:	TLP:WHITE
Repository:	MalwareBazaar

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-01-15 15:29:16 UTC Static: 6 Unpacker: 0 ClamAV: 0