YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 2133d5b272998cefa3bc0208ff8e29605ccfe7b7579ee5c523836000e7d32855.

Scan Results

SHA256 hash: 2133d5b272998cefa3bc0208ff8e29605ccfe7b7579ee5c523836000e7d32855
File size:479'239 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 02f8c1d3657887c06b645c243eaaa627
SHA1 hash: 11b2df21fcd7c28c3d82239a008615bff6073092
SHA3-384 hash: f9fd53e65ad7abd2f5f62103ae1464c06b73419f29e03705418ccacbec7f0b83bffad4040ea9f6d8c29c69a91a3349c5
First seen:2025-11-20 23:49:35 UTC
Last seen:Never
Sightings:1
imphash : 5d6cad172c5535e4b6b6bbd246571621
Create hunting rule
ssdeep : 3072:K/6uoIVpy6Cm6qR6Q035lUA5OygbE7WOHiUG+Tw0Xe2IXQm9hZ:K/boG9Cmb6135lug4Iw0uzXQm
TLSH : T1F9A4A5929C64AF46FE16453423A56EBA404E7D2F66E4421C785CFA0B337399730AFD0B
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon : 58b1b1b17068c881
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:91b7c55f-c66b-11f0-adeb-42010aa4000b
File name:02f8c1d3657887c06b645c243eaaa627
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Dropper.Ajku-10014126-0
Create hunting rule
Signature:Win.Dropper.Vbclone-10036195-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.