YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash ab43bb3349a5dd94504f3193e0879a93d4a5a4a038dd0ea86c2354b2d6826a14.

Scan Results

SHA256 hash: ab43bb3349a5dd94504f3193e0879a93d4a5a4a038dd0ea86c2354b2d6826a14
File size:647'680 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 03dffaf5ccf3b375a3ec3d6e33efb8cb
SHA1 hash: 5595047054d2d5cb05ca82ddd22a19e5b0fc611f
SHA3-384 hash: 5c44524c784e27d5cc4fc6f3c5b51c655ec69ca07a9dcec26d3b0f500ed1eb04ae2703921ba6eb4fe2f10b6e38ec4ca8
First seen:2025-11-21 02:59:07 UTC
Last seen:Never
Sightings:1
imphash : dae2264e721d7c66f7fa35e864d11aba
Create hunting rule
ssdeep : 12288:tW7R8IyDlXZNYVLeyUji0h90ZD0wxpGZIVuKrHs:k7BM0Le5ji0hmxNrM
TLSH : T1E7D42A16F6748335D073C0B9C5D2A69EE97234825B308ACB4286D77C3E67BE68636731
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon : 3379d88cc4c67133
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:0bcf5791-c686-11f0-adeb-42010aa4000b
File name:03dffaf5ccf3b375a3ec3d6e33efb8cb
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Packer.Nakedpacker-1
Create hunting rule
Signature:PUA.Win.Packer.NakedPacker-2
Create hunting rule
Signature:PUA.Win.Packer.NakedPacker-3
Create hunting rule
Signature:PUA.Win.Packer.NativeUdPacker-3
Create hunting rule
Signature:Win.Trojan.Agent-643275
Create hunting rule
Signature:Win.Trojan.Packed-77
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Borland
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:DebuggerException__SetConsoleCtrl
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:DetectEncryptedVariants
Create hunting rule
Author:Zinyth
Description:Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
TLP:TLP:WHITE
Repository:YARAify
Rule name:NakedPacker10byBigBoote
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:pe_detect_tls_callbacks
Create hunting rule
Author:
TLP:TLP:WHITE
Repository:YARAify
Rule name:RANSOMWARE
Create hunting rule
Author:ToroGuitar
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.