YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 5f45b962ad8afecb288f17017f1c04ec2a9b6b0bfee5ed25e1382dafd54af96c.

Scan Results

SHA256 hash: 5f45b962ad8afecb288f17017f1c04ec2a9b6b0bfee5ed25e1382dafd54af96c
File size:1'068'049 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 050b181b8820b3796637dc7841c907d0
SHA1 hash: c41ee9cd072958437ebfb24b5f401444dc2dabb5
SHA3-384 hash: 62528fc2c888e5279747eb85a488cfd903e1df41973d4da4b38722fe7ce9ce38784eec64288665d260ecbdd7d4a7dbf4
First seen:2025-11-21 02:46:24 UTC
Last seen:Never
Sightings:1
imphash : 77f13bc24efea5a05601b43cf44d1f1a
Create hunting rule
ssdeep : 12288:BYixUrHGQVL9vwf+SqwLa8Cck3460jr2Ybtre5MAGRNWYbuT71GBnoHSHMzYHY2Z:xxal9vGhqF3rWTktfCelzM
TLSH : T1AE358C66F54743BCE099D2BC96DA4EF1B62ABC25073069C72FA17A235EA17C01E3D710
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:45165930-c684-11f0-adeb-42010aa4000b
File name:050b181b8820b3796637dc7841c907d0
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.Win32.Malware-gen.14564659.UNOFFICIAL
Create hunting rule
Signature:SecuriteInfo.com.Win32.Malware-gen.17745242.UNOFFICIAL
Create hunting rule
Signature:Win.Trojan.FuBu-1
Create hunting rule
Signature:Win.Trojan.Shodi-9942317-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerException__ConsoleCtrl
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:DebuggerException__SetConsoleCtrl
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.