YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 73a5fc230d8f00d0fc5131b4344837c4f9f4a05fca0f34fb81abacf797b0df76.

Scan Results

SHA256 hash: 73a5fc230d8f00d0fc5131b4344837c4f9f4a05fca0f34fb81abacf797b0df76
File size:460'800 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0bad4a8af452a2ec257e3f99c43cc425
SHA1 hash: a58b1bfb22a930363f1af026355050435d937a8f
SHA3-384 hash: 5811b1ea76aa690b6d063b94c81271dc6e04ed0b68dcdee7f1fb6152f1d8cca11dc1e4b6ccfe03f4d13d3a15a8afbdc8
First seen:2025-11-20 23:49:02 UTC
Last seen:Never
Sightings:1
imphash : 7489bd7fc3c310a06e7840a3a8e5ca40
Create hunting rule
ssdeep : 6144:2w90CA0QawtUrqNUk0BX3h3KuemLqd7C1io0edeuVkHbHWHPAqYvr6yRIIsWCD:na0wIk0BX3RKuemGd70ioGuVnW6oIt
TLSH : T103A48C1077D08135F1B329368ABFE724542DB8715F6886CFE388166E5EB06E1EA3171B
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon : ce8393335b4d37ba
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:7e0990eb-c66b-11f0-adeb-42010aa4000b
File name:0bad4a8af452a2ec257e3f99c43cc425
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:SecuriteInfo.com.FileRepMalware.99345232.UNOFFICIAL
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:DetectEncryptedVariants
Create hunting rule
Author:Zinyth
Description:Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
TLP:TLP:WHITE
Repository:YARAify
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify
Rule name:maldoc_find_kernel32_base_method_1
Create hunting rule
Author:Didier Stevens (https://DidierStevens.com)
TLP:TLP:WHITE
Repository:
Rule name:maldoc_getEIP_method_1
Create hunting rule
Author:Didier Stevens (https://DidierStevens.com)
TLP:TLP:WHITE
Repository:
Rule name:meth_get_eip
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify
Rule name:meth_peb_parsing
Create hunting rule
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify
Rule name:PE_Digital_Certificate
Create hunting rule
Author:albertzsigovits
TLP:TLP:WHITE
Repository:
Rule name:win_samsam_auto
Create hunting rule
Author:Felix Bilstein - yara-signator at cocacoding dot com
Description:autogenerated rule brought to you by yara-signator
TLP:TLP:WHITE
Repository:Malpedia
Rule name:Windows_Shellcode_Rdi_eee75d2c
Create hunting rule
Author:Elastic Security
TLP:TLP:WHITE
Repository:elastic

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.