YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 59d20bc25169bbf35d8215765966bca93d932fff4febc71f9804747114288eb0.

SHA256 hash:	59d20bc25169bbf35d8215765966bca93d932fff4febc71f9804747114288eb0
File size:	267'569 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	0232bde7e6b9ff9d503a806252d2709a
SHA1 hash:	47322fe5a6dcf0163a931e325662dcd7c1d98c9c
SHA3-384 hash:	1b005241664fd8a7ae2f722d943cb5add14fa8b04c6378784227cb0f24042be140f0b66269039eea57d4d5a3f7ec794e
First seen:	2025-11-20 23:59:24 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	6144:A7Woyc5HL6d4xz1oBeRbc2baaWeSa6pdBZuuB2fzql:iWvc5WAKUc6WeSa6pjZuuB2fzi
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	SUSP_XORed_URL_In_EXE Create hunting rule
Author:	Florian Roth (Nextron Systems)
Description:	Detects an XORed URL in an executable
Reference:	https://twitter.com/stvemillertime/status/1237035794973560834
TLP:	TLP:WHITE
Repository:	Neo23x0

Rule name:	SUSP_XORed_URL_in_EXE_RID2E46 Create hunting rule
Author:	Florian Roth
Description:	Detects an XORed URL in an executable
Reference:	https://twitter.com/stvemillertime/status/1237035794973560834
TLP:	TLP:WHITE

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-11-20 23:59:24 UTC Static: 4 Unpacker: 0 ClamAV: 0