YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash ac91b87db0df9129d27cf373a8c6b6f679ccca8c473a3bba1dcf264852716ba1.

Scan Results


SHA256 hash: ac91b87db0df9129d27cf373a8c6b6f679ccca8c473a3bba1dcf264852716ba1
File size:331'264 bytes
File download: Original Unpacked
MIME type:application/x-dosexec
MD5 hash: 0ff8e71508f80be60754522ee0a5b2a4
SHA1 hash: a67aee579523d01c2dfb3dbda4c415b9786c8b23
SHA3-384 hash: 226f7e361432f774cf6053a7bea8bfb84b5af612d5a0d84d1a7627557f32f617f8703b8c5265e4986326dd2277e68f87
First seen:2025-11-21 02:55:26 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 6144:PkJDLhNKEo8KwaJZItrVe5h+mT5EWZxYrYBei6V:PkJD1NK38taqVkT5EYxYrQUV
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : b230f0c4e4b4e4c0

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:8862db12-c685-11f0-adeb-42010aa4000b
File name:0ff8e71508f80be60754522ee0a5b2a4
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__API
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:DebuggerException__SetConsoleCtrl
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:golang_bin_JCorn_CSC846
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
TLP:TLP:WHITE
Repository:YARAify
Rule name:win_samsam_auto
Author:Felix Bilstein - yara-signator at cocacoding dot com
Description:autogenerated rule brought to you by yara-signator
TLP:TLP:WHITE
Repository:Malpedia

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.