YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 3d82597b2ef3cdbc8adc4c2d6a6446e78d95f55bee77572d38a65da8bf0480ed.

Scan Results

SHA256 hash: 3d82597b2ef3cdbc8adc4c2d6a6446e78d95f55bee77572d38a65da8bf0480ed
File size:1'302'528 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 5aa38333185c7757c268f0bbda8ab1a9
SHA1 hash: 4e19a7c17c8b72633645abbc6e25b79706d2ddba
SHA3-384 hash: f0bdeaea72b6f0ea94d3f58a7ee8e9c612ec7a7ae5ab41a9925d6c57231ddd63ee7abee57775435a0bbac0a474953264
First seen:2025-11-20 23:56:02 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 24576:JzU6APMGiHEMQCMwB6SuEwgVcmoQdlUZo8:l5cSGgqCv8
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 818da080a0a08082
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:787a7079-c66c-11f0-adeb-42010aa4000b
File name:400000.07a35ac72a7556122c7c0c24ff782964.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Borland
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:pe_detect_tls_callbacks
Create hunting rule
Author:
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.