YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 9a440688fd64682614b598af8fc3cda9cb52c2b5c1bee4f8f27b82e58c7a4fa1.

SHA256 hash:	9a440688fd64682614b598af8fc3cda9cb52c2b5c1bee4f8f27b82e58c7a4fa1
File size:	118'784 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	46b1213e58739c262a104fab1c4e303e
SHA1 hash:	49656c1ebe00a7414939d81ac5f7c56671d7cac8
SHA3-384 hash:	cf92a0d264dfd9426c57da5200fb5d965dca2172a4d6b0f1ef3fc47a01441168c62efb932eb18a38cff2c38dd7993f16
First seen:	2026-01-21 16:48:11 UTC
Last seen:	Never
Sightings:	1
imphash :	a12d186f65c99f872323a61923ce70d8 Create hunting rule
ssdeep :	1536:tHjHFrHIS0kIM5o3Y7IqqGmpp6n8zZHWso8iDHq:tDHFrHICh/Ngp8n8zosmHq
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	pe_detect_tls_callbacks Create hunting rule
Author:
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	pe_no_import_table Create hunting rule
Author:
Description:	Detect pe file that no import table
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	Windows_Generic_Threat_fca7f863 Create hunting rule
Author:	Elastic Security
TLP:	TLP:WHITE
Repository:	elastic

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-01-21 16:48:11 UTC Static: 3 Unpacker: 0 ClamAV: 0