🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash aefd4277626234d9b1fcc4d5331f98e94cef88f7912574eab8d3571c24bb4af3.

Scan Results


SHA256 hash: aefd4277626234d9b1fcc4d5331f98e94cef88f7912574eab8d3571c24bb4af3
File size:495'616 bytes
File download: Original
MIME type:application/octet-stream
MD5 hash: 9876575701336e9e44a7c93b2d0bd3a0
SHA1 hash: 26cae518f7e6f8928627b08611ab9b059ccc9cf5
SHA3-384 hash: ebb904a5150af09bd363b7fef6f4c020095973c05975180af5e261dd6045dc88a30e9462d2729cea775f7a141aaa1b5c
First seen:2026-10-30 20:29:00 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 12288:NCVX1JezPPMJL0dRaGW3upbE53SSa1NoxYb0ETn2Sit9W:MpWoJL0dRaGW3uw3SSa1NoxJETn2SiT
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:8a8ef05b-d4a0-11f1-ae09-42010aa4000b
File name:31b86000.shc
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:exploit_any_poppopret
Author:Jeff White [karttoon@gmail.com] @noottrak
Description:Identify POP -> POP -> RET opcodes for quick ROP Gadget creation in target binaries.
TLP:TLP:WHITE
Repository:karttoon

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.