YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 48ed65ac263f148d42950bc0a0d35c56eb0d8b070d5b3a42b3e7d55332bbd86a.

Scan Results

SHA256 hash: 48ed65ac263f148d42950bc0a0d35c56eb0d8b070d5b3a42b3e7d55332bbd86a
File size:1'993'728 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 18e33e573557652731a41dc9f053d2f1
SHA1 hash: 6a693c67d42a3033641e9888c8f2e95020b21c9d
SHA3-384 hash: cf7ff9b351c1f39f9967d20b41102eeee2073602454ff8bcc99bfa85271ea9ed549a8be2062de811279785acca48bda6
First seen:2022-11-24 19:55:00 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 24576:wNMeWGFs87P8Qy/rTOu+kHlKSN93q+vgbRLJYGD9:wNMeFsIyWIFKU93q+vgbRlxJ
TLSH : T147956C05B6C40B36D02ECB35D6964606FBB0F899173DA3DB069452B814F3FD22B7A4DA
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:e142ae70-6c31-11ed-a71a-42010aa4000b
File name:7ffb1db30000.System.Drawing.ni.dll
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:BAZT_B5_NOCEXInvalidStream
Create hunting rule
TLP:TLP:WHITE
Repository:MalwareBazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.