YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash b3a87565b40181cde1e70cbe81df627ca415f1277af60ffea52079d6d9cca87b.

Scan Results

SHA256 hash: b3a87565b40181cde1e70cbe81df627ca415f1277af60ffea52079d6d9cca87b
File size:479'858 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0bf7336bfabd6016be175a9673566e76
SHA1 hash: 9e612158106e3831419a09ddfa4ab0ba35c03c6f
SHA3-384 hash: 3fafdb2f6775bf72113bc7df6c0133ced21d4e249f942f9fa1e2800dac03cbea2c91808115bb6c325b9e0a9a2d9abf08
First seen:2025-11-20 23:55:21 UTC
Last seen:Never
Sightings:1
imphash : 5d6cad172c5535e4b6b6bbd246571621
Create hunting rule
ssdeep : 3072:MjRAovIs6X5/hYYEPgSXuf8yA0AP60XOx8HxtfeOsSD1vbEBS19I:MjuoSp/h+PfXufzKzbsShDEBS
TLSH : T1D1A494929C64AF45FE16453427956EBA004E7D2FA6E4422C785CFA0B337399730AF90B
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:60121be1-c66c-11f0-adeb-42010aa4000b
File name:0bf7336bfabd6016be175a9673566e76
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.