YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 1e418837bf98285825dd8db7f81d712fd28c00f966385b556509469fb2d57d31.

Scan Results

SHA256 hash: 1e418837bf98285825dd8db7f81d712fd28c00f966385b556509469fb2d57d31
File size:36'864 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 3fe0d61dd28f1367a4a97d0e897810e2
SHA1 hash: 23c3f578bcb3b4ea43cd50178026111d693f2e35
SHA3-384 hash: f175fbb1184d233107412fe40a15ba22f706193bf5ea846bcaa67be5072131b98f2784f500e88a17ae8f67f2fd6d54f3
First seen:2022-11-24 19:46:41 UTC
Last seen:Never
Sightings:1
imphash : f736665ac33b6775ed4c156ddf9c52af
Create hunting rule
ssdeep : 768:w6Lo1RPbPFHRgzwFPlf/efMTs5TDEUOgCbJ:No1xb4zwf/efMTYnQH
TLSH : T156F23B577DA0D2D2C090CAB01531EBBADB76E8621B0FE42E7BD044561A97160FF5E44F
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:b79bf005-6c30-11ed-a71a-42010aa4000b
File name:400000.63ce0b9c-36db-4f1c-8220-a2824d0aadf7.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Packer.Lccwin-2
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:without_urls
Create hunting rule
Author:Antonio Sanchez <asanchez@hispasec.com>
Description:Rule to detect the no presence of any url
Reference:http://laboratorio.blogs.hispasec.com/
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.