YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 86fb64aeddb78e9e6d667e3714d9014b90b52062b69857502b4593c039aed63a.

Scan Results

SHA256 hash: 86fb64aeddb78e9e6d667e3714d9014b90b52062b69857502b4593c039aed63a
File size:188'416 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0e845daa8c40169997d1d41fc242a7f6
SHA1 hash: 527f1b468aad4fc1e620d5fb83c748e04fb58f5a
SHA3-384 hash: 1a7ba2e5ef509f9cd6da06b25df81c54dd85d2c979df24c74426ca080fdc274c185119b496fbbcc4024c3b43a9540041
First seen:2025-11-20 23:49:01 UTC
Last seen:Never
Sightings:1
imphash : be6fa16f501de575a1d8eaaac5246ba0
Create hunting rule
ssdeep : 3072:JVM40CoDWC4PduKuyWL+BrPmTUlvnqcxRuUrm:JVZo01uKu8reTUlPqcxRuUr
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 1001873db9313e10
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:7d5e59ee-c66b-11f0-adeb-42010aa4000b
File name:400000.80d29dea-3fe0-4284-b5bb-d7a3ba433973.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Zusy-6878655-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.