YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 250ecaedaa02913dc6decef11cada3ad9247dbbe5f280d298bc4c80dd59c66d2.

SHA256 hash:	250ecaedaa02913dc6decef11cada3ad9247dbbe5f280d298bc4c80dd59c66d2
File size:	311'296 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	0c2fc30fb7ac0329348d90d9623d5d93
SHA1 hash:	f9758a3b0e40b068874d8658a18e6ca9d84e20c6
SHA3-384 hash:	feed23f249ad503e48d855a20b6044a639ea40c54f8f0de5ac14611fd9306922d79a95382171546e236c8e3127d7f344
First seen:	2022-11-24 19:43:35 UTC
Last seen:	Never
Sightings:	1
imphash :	60fbd35de1521df68e303d54b2c1b0c8 Create hunting rule
ssdeep :	3072:NpF97cNmFFcapEVtTBf7mWvMilg3zd3jceABCODJRCCFf8UU5UNZLKQpFtd:NpHcYHdpEVtTByRgKFGUOfCMU5UHP7
TLSH :	T14864D0193AD089B2D07F91B384E6BB2CF7B67B311621D48B774C86391D22762F9122D7 Create hunting rule
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	Win.Malware.Bzub-6727003-0 Create hunting rule

Signature:	Win.Malware.Bzub-9969513-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

Rule name:	win_jaku_auto Create hunting rule
Author:	Felix Bilstein - yara-signator at cocacoding dot com
Description:	Detects win.jaku.
TLP:	TLP:WHITE
Repository:	Malpedia

Rule name:	win_sality_auto Create hunting rule
Author:	Felix Bilstein - yara-signator at cocacoding dot com
Description:	Detects win.sality.
TLP:	TLP:WHITE
Repository:	Malpedia

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2022-11-24 19:43:35 UTC Static: 2 Unpacker: 0 ClamAV: 2