YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 64ca8e04d6a4f95041f80d533652de58ad101b8ec1dff182f996a9ac9dbaf0df.

Scan Results

SHA256 hash: 64ca8e04d6a4f95041f80d533652de58ad101b8ec1dff182f996a9ac9dbaf0df
File size:45'056 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0e799ae91849c1339f0f6de0443c9742
SHA1 hash: 4f2a3909cb3ba932f7b54f24496996c7f88ecb59
SHA3-384 hash: 807b745337616e88af91e28d45393b20cc23e5e045c04ea3653e371b7d5c95b89e66696bf742b1873dfd0a929c91fdfa
First seen:2025-11-21 02:44:10 UTC
Last seen:Never
Sightings:1
imphash : 0147fa67fef26cfd754ec08cec0f1c9b
Create hunting rule
ssdeep : 192:zjUWFh4fvYGIQmjUWFh4fvYGIQnsA6psQ56uFaNJhLkwcud2DH9VwGfctQEAC5Es:vKEJKE7pD/aNJawcudoD7U55Es
TLSH : T10D135A02F29AE958D05B01365C7FBB2F1974AE0A9E51C29775D8B33FACB07147028A93
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon : 1003873d31213f10
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:f50922bc-c683-11f0-adeb-42010aa4000b
File name:0e799ae91849c1339f0f6de0443c9742
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Dqrc-10030599-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:UPX293300LZMAMarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXv20MarkusLaszloReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:classified
Author:classified
Description:classified
TLP :TLP:AMBER
Rule name:win_upx_packed
Create hunting rule
Author:Reedus0
Description:Rule for detecting UPX packed malware
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.