YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 96aff8b7735aefa72c266a73c7f2f23dbe2933b20be6253d4af6defd33a5dba5.

Scan Results

SHA256 hash: 96aff8b7735aefa72c266a73c7f2f23dbe2933b20be6253d4af6defd33a5dba5
File size:376'848 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 00b76fadb72efe7d9fe795aef553c0f5
SHA1 hash: b6753254e7eef6fdcb9e98b923e9316229419d46
SHA3-384 hash: eaf20e46a1bb98df9da4dbabf6bbf5867f788ec2b66f2fca7caa499950b201ad48f0fc0e7f810e46fc6dc2a2b864c11d
First seen:2025-11-21 02:57:14 UTC
Last seen:Never
Sightings:1
imphash : 476f92c8f9ddbcb805cdc5c61fbc5635
Create hunting rule
ssdeep : 6144:XLiZG2+BtYxHL07SSYewzsfvTwnCQXwFjpWwSXomZeruy8N6MkSad8V:2QOxHuPwoECyWjpWFXber26MkSad8V
TLSH : T18B849D9C326076DFC86BCDB299A82C68AB6034775B0BD203A44716DD9D0DA9BCF145F3
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:c889798c-c685-11f0-adeb-42010aa4000b
File name:00b76fadb72efe7d9fe795aef553c0f5
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:INDICATOR_EXE_Packed_ConfuserEx
Create hunting rule
Author:ditekSHen
Description:Detects executables packed with ConfuserEx Mod
TLP:TLP:WHITE
Repository:diˈtekSHən
Rule name:NET
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.