YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 61d8a87aebd088de21def15823223bce8fd89d4cb1051a88bbefb71607fdb9fa.

Scan Results

SHA256 hash: 61d8a87aebd088de21def15823223bce8fd89d4cb1051a88bbefb71607fdb9fa
File size:36'864 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 3059917731723fccb1226b7343642b9a
SHA1 hash: 315cf805abffe8750bbc847603f363405f45699b
SHA3-384 hash: 8755d1d0a81093dbc275eea5f2eb2f7e2311a5b2c42399fdd30143369933c7939ac3b22dc519d1d8621581f3736cc826
First seen:2023-01-25 09:36:29 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 768:J8QE7cyM09n6ESXyyrdaPAPYYwLfv3FGpx7bPr:ytcyM0gESXlrcOYYwLH3Fy
TLSH : T101F27CA32F00C9F3D38A1A7510612E5EC7F99D3882F29C6B9395BD8B69FB0D4D438255
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

You can browse the 10 most recent tasks associated with this file blow.

Task Information

Task ID:bed86444-9c93-11ed-98c2-42010aa4000b
File name:af0000.WipkLx.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Packer.Asprotect-3
Create hunting rule
Signature:Win.Malware.Bdld-9770176-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:INDICATOR_EXE_Packed_ASPack
Create hunting rule
Author:ditekSHen
Description:Detects executables packed with ASPack
TLP:TLP:WHITE
Repository:ditekshen
Rule name:meth_get_eip
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:yaraify
Rule name:win_unidentified_045_auto
Create hunting rule
Author:Felix Bilstein - yara-signator at cocacoding dot com
Description:Detects win.unidentified_045.
TLP:TLP:WHITE
Repository:malpedia
Rule name:classified
Author:classified
Description:classified
TLP :TLP:GREEN

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.