YARAify Scan Results
You are viewing the YARAify database entry for the file with the SHA256 hash 61d8a87aebd088de21def15823223bce8fd89d4cb1051a88bbefb71607fdb9fa
.
Scan Results
SHA256 hash: | 61d8a87aebd088de21def15823223bce8fd89d4cb1051a88bbefb71607fdb9fa | |
---|---|---|
File size: | 36'864 bytes | |
File download: | Original | |
MIME type: | application/x-dosexec | |
MD5 hash: | 3059917731723fccb1226b7343642b9a | |
SHA1 hash: | 315cf805abffe8750bbc847603f363405f45699b | |
SHA3-384 hash: | 8755d1d0a81093dbc275eea5f2eb2f7e2311a5b2c42399fdd30143369933c7939ac3b22dc519d1d8621581f3736cc826 | |
First seen: | 2023-01-25 09:36:29 UTC | |
Last seen: | Never | |
Sightings: | 1 | |
imphash : | n/a | |
ssdeep : | 768:J8QE7cyM09n6ESXyyrdaPAPYYwLfv3FGpx7bPr:ytcyM0gESXlrcOYYwLH3Fy | |
TLSH : | T101F27CA32F00C9F3D38A1A7510612E5EC7F99D3882F29C6B9395BD8B69FB0D4D438255 | |
telfhash : | n/a | |
gimphash : | n/a | |
dhash icon : | n/a |
Tasks
You can browse the 10 most recent tasks associated with this file blow.
Task Information
Task ID: | bed86444-9c93-11ed-98c2-42010aa4000b | |
---|---|---|
File name: | af0000.WipkLx.exe | |
Task parameters: | ClamAV scan: | True |
Unpack: | False | |
Share file: | True |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
Signature: | PUA.Win.Packer.Asprotect-3 |
---|
Signature: | Win.Malware.Bdld-9770176-0 |
---|
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
Rule name: | INDICATOR_EXE_Packed_ASPack |
---|---|
Author: | ditekSHen |
Description: | Detects executables packed with ASPack |
TLP: | TLP:WHITE |
Repository: | ditekshen |
Rule name: | meth_get_eip |
---|---|
Author: | Willi Ballenthin |
TLP: | TLP:WHITE |
Repository: | yaraify |
Rule name: | win_unidentified_045_auto |
---|---|
Author: | Felix Bilstein - yara-signator at cocacoding dot com |
Description: | Detects win.unidentified_045. |
TLP: | TLP:WHITE |
Repository: | malpedia |
Rule name: | classified |
---|---|
Author: | classified |
Description: | classified |
TLP : | TLP:GREEN |
Unpacker
The following YARA rules matched on the unpacked file.
Disabled by submitter
Unpacked Files
The following files could be unpacked from this sample.
Disabled by submitter