YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 81d5b5ee775fcc947a71d56b3ff350106777a981607a61dad980f780d7b41126.

Scan Results

SHA256 hash: 81d5b5ee775fcc947a71d56b3ff350106777a981607a61dad980f780d7b41126
File size:60'416 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 1821241028c270ecb1ce81795351630f
SHA1 hash: b689ca95a05b85d8af347a1b5eff0a5ebba48e0c
SHA3-384 hash: 3ca7fc35c031e0a0ffbfd880826dd9bd05973308223fff54e99e54e24ac94e8b1564acd96765aaa72af216cfc1355303
First seen:2025-11-20 23:50:14 UTC
Last seen:Never
Sightings:1
imphash : 02f889462d5b9d177381fc53107a7ccd
Create hunting rule
ssdeep : 1536:GA3/fr+nXO1zQz0guDc6wWyBrPFW2iwTc:GQyGW0go+X1FW2VTc
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:a8f284bf-c66b-11f0-adeb-42010aa4000b
File name:1821241028c270ecb1ce81795351630f
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.