YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 31ad2666fe25f222ad509285045bea7e7f215f772114e6450d5fb9846494cd51.

Scan Results

SHA256 hash: 31ad2666fe25f222ad509285045bea7e7f215f772114e6450d5fb9846494cd51
File size:200'704 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: d8be7af76cf6ee19429d7a8219bc0c37
SHA1 hash: 406a1c8a02c2511c09e868a06c5a4b232c5cfcb3
SHA3-384 hash: b84f1f5859e8da28a00ffa4cbb25bf2ca26c8b6ef0aa8b7e94954960d3fa63d32430c6a0e187250c48e8a0d4e5ecc8ed
First seen:2023-01-25 09:37:55 UTC
Last seen:Never
Sightings:1
imphash : e4742a62fda2e64b586a5b84efe3f040
Create hunting rule
ssdeep : 768:AlvxM6hZCUaUoncTdxhoBmGIRccnzXJgkc5NDBhy8sijI9VC6Cve:AzM6+UAKdxCBmGIFJmNNM8G9B
TLSH : T1FA141A3BA59046E1C0154C7121F99FB2E57951B213BEBD0AE3C0C971E46B5CAE63B78C
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

You can browse the 10 most recent tasks associated with this file blow.

Task Information

Task ID:f270b42a-9c93-11ed-98c2-42010aa4000b
File name:400000.Jjiklc32.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Packer.Lccwin-2
Create hunting rule
Signature:Win.Trojan.Crypted-30
Create hunting rule
Signature:Win.Trojan.Obfus-38
Create hunting rule
Signature:Win.Trojan.Qukart-6874817-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:meth_get_eip
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:yaraify
Rule name:QbotStuff
Create hunting rule
Author:anonymous
TLP:TLP:WHITE
Repository:malware-bazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.