YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash a02c26c5a4f5062e7b25afada29a1a0efdce44b062c956bd983838f866fe1568.

Scan Results


SHA256 hash: a02c26c5a4f5062e7b25afada29a1a0efdce44b062c956bd983838f866fe1568
File size:311'296 bytes
File download: Original
MIME type:application/octet-stream
MD5 hash: 29c85c687cf153b29bb89faff4ac22d0
SHA1 hash: f5f5533eba7a74e0c3c588c95aa86c2fbbeebeb4
SHA3-384 hash: 0119e5b6c76b704faa79ec966f9af21206e15be7ef472c1184343a076459814c6b173082f2c11c2f4807cbe174ff3a20
First seen:2026-03-11 15:33:43 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 3072:zzG2Oc9RvyPZba+Hwc7SszsaqVLoGZEVbQsXfT7nKy6Ct0to:4cGxbTzGLWhiy6k
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:afe89e34-1d5f-11f1-b47f-42010aa4000b
File name:44d1000.shc
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:HeavensGate
Author:kevoreilly
Description:Heaven's Gate: Switch from 32-bit to 64-mode
TLP:TLP:WHITE
Repository:CAPE
Rule name:meth_stackstrings
Author:Willi Ballenthin
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.