YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash a3cfe06f2a6045d3a8b2bd9813c1158e63013fe914e9cab0b6fde98c1358ff6b.

Scan Results

SHA256 hash: a3cfe06f2a6045d3a8b2bd9813c1158e63013fe914e9cab0b6fde98c1358ff6b
File size:188'416 bytes
File download: Original Unpacked
MIME type:application/x-dosexec
MD5 hash: 0d5e9dc8601df378e6272e483e0303c1
SHA1 hash: 971b5ae0f4706f2096d1ec08618477e86d805b52
SHA3-384 hash: 0dc0abb5e05a4ecb40e5d62be760fab006edc6a1e6c338444ba5f55c6248dd32dc6f517ff501a7cb8aa70df48be4bcd1
First seen:2025-11-21 00:01:24 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 3072:naRs2joO1HXAZNL9T3dTb97olvnqXdJuX:naXoOoNLLTp7olPqXdJu
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 1003873db9313e10
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:380b07ae-c66d-11f0-adeb-42010aa4000b
File name:0d5e9dc8601df378e6272e483e0303c1
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Zusy-6878655-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.