YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 61d8a87aebd088de21def15823223bce8fd89d4cb1051a88bbefb71607fdb9fa.

SHA256 hash:	61d8a87aebd088de21def15823223bce8fd89d4cb1051a88bbefb71607fdb9fa
File size:	36'864 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	3059917731723fccb1226b7343642b9a
SHA1 hash:	315cf805abffe8750bbc847603f363405f45699b
SHA3-384 hash:	8755d1d0a81093dbc275eea5f2eb2f7e2311a5b2c42399fdd30143369933c7939ac3b22dc519d1d8621581f3736cc826
First seen:	2023-01-25 09:36:29 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	768:J8QE7cyM09n6ESXyyrdaPAPYYwLfv3FGpx7bPr:ytcyM0gESXlrcOYYwLH3Fy
TLSH :	T101F27CA32F00C9F3D38A1A7510612E5EC7F99D3882F29C6B9395BD8B69FB0D4D438255 Create hunting rule
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

Signature:	PUA.Win.Packer.Asprotect-3 Create hunting rule

Signature:	Win.Malware.Bdld-9770176-0 Create hunting rule

The following YARA rules matched on the file (static analysis).

Rule name:	INDICATOR_EXE_Packed_ASPack Create hunting rule
Author:	ditekSHen
Description:	Detects executables packed with ASPack
TLP:	TLP:WHITE
Repository:	diˈtekSHən

Rule name:	meth_get_eip Create hunting rule
Author:	Willi Ballenthin
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	win_unidentified_045_auto Create hunting rule
Author:	Felix Bilstein - yara-signator at cocacoding dot com
Description:	Detects win.unidentified_045.
TLP:	TLP:WHITE
Repository:	Malpedia

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2023-01-25 09:36:29 UTC Static: 4 Unpacker: 0 ClamAV: 2