YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 250ecaedaa02913dc6decef11cada3ad9247dbbe5f280d298bc4c80dd59c66d2.

Scan Results


SHA256 hash: 250ecaedaa02913dc6decef11cada3ad9247dbbe5f280d298bc4c80dd59c66d2
File size:311'296 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0c2fc30fb7ac0329348d90d9623d5d93
SHA1 hash: f9758a3b0e40b068874d8658a18e6ca9d84e20c6
SHA3-384 hash: feed23f249ad503e48d855a20b6044a639ea40c54f8f0de5ac14611fd9306922d79a95382171546e236c8e3127d7f344
First seen:2022-11-24 19:43:35 UTC
Last seen:Never
Sightings:1
imphash : 60fbd35de1521df68e303d54b2c1b0c8
ssdeep : 3072:NpF97cNmFFcapEVtTBf7mWvMilg3zd3jceABCODJRCCFf8UU5UNZLKQpFtd:NpHcYHdpEVtTByRgKFGUOfCMU5UHP7
TLSH : T14864D0193AD089B2D07F91B384E6BB2CF7B67B311621D48B774C86391D22762F9122D7
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


You can browse the 10 most recent tasks associated with this file blow.

Task Information


Task ID:48aa4d4f-6c30-11ed-a71a-42010aa4000b
File name:400000.04061870-1705-42d3-badd-37cb9970daf2.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Bzub-6727003-0
Signature:Win.Malware.Bzub-9969513-0

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:win_jaku_auto
Author:Felix Bilstein - yara-signator at cocacoding dot com
Description:Detects win.jaku.
TLP:TLP:WHITE
Repository:malpedia
Rule name:win_sality_auto
Author:Felix Bilstein - yara-signator at cocacoding dot com
Description:Detects win.sality.
TLP:TLP:WHITE
Repository:malpedia

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.