YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 485c0ee00c52122c271a3f36a78b16963a3403da08cc5c2f8c94c5bddd0599c0.

Scan Results

SHA256 hash: 485c0ee00c52122c271a3f36a78b16963a3403da08cc5c2f8c94c5bddd0599c0
File size:365'469 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 3e49143b817388565484360f9e046d38
SHA1 hash: 337d4eeafef55a74267ec6619c8c12ffcdf6216e
SHA3-384 hash: 39b7f104934dd96f28aab912f96817c34175a68977f28ec8f14b47fb3bc4c2f04d780107ba0e5c958f5d0d576aa414d2
First seen:2025-03-05 21:29:05 UTC
Last seen:Never
Sightings:1
imphash : 87e211693e35835b135c8d40b4c5bc68
Create hunting rule
ssdeep : 3072:7y+4F8A17dmt/7iaAnXMZkRhnq8hDtHPbHYN/Q00uLuJ6o3gBWnJ1:qd6otz
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : ccd2dae26cc86460
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:dd855c29-fa08-11ef-b4a6-42010aa4000b
File name:3e49143b817388565484360f9e046d38
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Trojan.Vbkrypt-2628
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:Sus_Obf_Enc_Spoof_Hide_PE
Create hunting rule
Author:XiAnzheng
Description:Check for Overlay, Obfuscating, Encrypting, Spoofing, Hiding, or Entropy Technique(can create FP)
TLP:TLP:WHITE
Repository:YARAify
Rule name:upx_largefile
Create hunting rule
Author:k3nr9
TLP:TLP:WHITE
Repository:YARAify
Rule name:UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXv20MarkusLaszloReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.