YARAify Scan Results
You are viewing the YARAify database entry for the file with the SHA256 hash 3c52721ff9f3db1d24fe361128ac103d3049d44c66ef4a870503ec3372d8c0bc
.
Scan Results
SHA256 hash: | 3c52721ff9f3db1d24fe361128ac103d3049d44c66ef4a870503ec3372d8c0bc | |
---|---|---|
File size: | 61'440 bytes | |
File download: | Original | |
MIME type: | application/x-dosexec | |
MD5 hash: | 20a4e85347d9bb625811b345789533a1 | |
SHA1 hash: | eee2c544cac332ed6e992f93f185bd29e7bbbdb6 | |
SHA3-384 hash: | ace3100b3578134130462353d10f4ecd58d853a6ebde214eb0b668eb005a62bbcaa1ea2423c2098f1af1baff0a6631fe | |
First seen: | 2023-01-25 09:39:31 UTC | |
Last seen: | Never | |
Sightings: | 1 | |
imphash : | bf064e45e3c63a655d4e7ae4a671ad55 | |
ssdeep : | 1536:jZfAIsithfScOGxDLPL5FDbmRGGCq2iW7z:jZfEeDLTXe8GCH | |
TLSH : | T196538DE38E8088F7D6CE2E711061395FCBFD9D34C572AC6B9BA4BC9668FD580D828145 | |
telfhash : | n/a | |
gimphash : | n/a | |
dhash icon : | n/a |
Tasks
You can browse the 10 most recent tasks associated with this file blow.
Task Information
Task ID: | 2b52d091-9c94-11ed-98c2-42010aa4000b | |
---|---|---|
File name: | a20000.DhSLMh.exe | |
Task parameters: | ClamAV scan: | True |
Unpack: | False | |
Share file: | True |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
Signature: | PUA.Win.Packer.Asprotect-3 |
---|
Signature: | Win.Malware.Bdld-9770176-0 |
---|
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
Rule name: | INDICATOR_EXE_Packed_ASPack |
---|---|
Author: | ditekSHen |
Description: | Detects executables packed with ASPack |
TLP: | TLP:WHITE |
Repository: | ditekshen |
Rule name: | meth_get_eip |
---|---|
Author: | Willi Ballenthin |
TLP: | TLP:WHITE |
Repository: | yaraify |
Rule name: | shellcode |
---|---|
Author: | nex |
Description: | Matched shellcode byte patterns |
TLP: | TLP:WHITE |
Repository: | malware-bazaar |
Rule name: | win_unidentified_045_auto |
---|---|
Author: | Felix Bilstein - yara-signator at cocacoding dot com |
Description: | Detects win.unidentified_045. |
TLP: | TLP:WHITE |
Repository: | malpedia |
Rule name: | classified |
---|---|
Author: | classified |
Description: | classified |
TLP : | TLP:GREEN |
Unpacker
The following YARA rules matched on the unpacked file.
Disabled by submitter
Unpacked Files
The following files could be unpacked from this sample.
Disabled by submitter