YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 7dc4a0c17cbca9b6acbc8dcd45d4cd19eadc0fbcd44bb4cef67ae88fdf15a5a5.

Scan Results

SHA256 hash: 7dc4a0c17cbca9b6acbc8dcd45d4cd19eadc0fbcd44bb4cef67ae88fdf15a5a5
File size:334'172 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 100b4dcc37dce8fd41ddc357adeb56f0
SHA1 hash: 2fa52d5de964e6e808cbad592ed72a1fa8de1c81
SHA3-384 hash: 14a9a2c99a51000adcd32398580cef7220d324bb12e19580cbd8c1ec52ae4cb5c9a42ae874acede55fe8666e3462378c
First seen:2026-03-11 15:38:28 UTC
Last seen:Never
Sightings:1
imphash : 210081ca7cb0771b9f31a7245cedfafa
Create hunting rule
ssdeep : 3072:4x6AHjYzaFXg+w17jsgS/jHagQg19Vlnhfxu4x6AHjYzaFXg+w17jsgS/jHagQgq:4xzYzaFXi17jklhbxzYzaFXi17jklh
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : e4f6b2f0e8ccf0f0
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:5993c5f6-1d60-11f1-b47f-42010aa4000b
File name:100b4dcc37dce8fd41ddc357adeb56f0
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.KazekageGaara-7111282-1
Create hunting rule
Signature:Win.Malware.Ulise-9806846-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:UPXv20MarkusLaszloReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.