YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash b92f55166fcb9d144b3840df5be21e6c81b70188c5c213bd8701ed1b5fe1b1b4.

Scan Results

SHA256 hash: b92f55166fcb9d144b3840df5be21e6c81b70188c5c213bd8701ed1b5fe1b1b4
File size:10'973'727 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 042d5cc26bbfe5b8a19472c110fbf83a
SHA1 hash: 5ddbc956aaeedc0f8ecb9bd3b3d24be6a4c0688e
SHA3-384 hash: 0e3234e07afbb0003df5b31d0847029ea0721fbcb3d9cc78c85274e0bdb9386492cf5ca9e9d2c2e435588709f776c7d0
First seen:2022-11-24 19:50:27 UTC
Last seen:Never
Sightings:1
imphash : 0eeb1f2a81d8d77e0e4d4b45526fd6df
Create hunting rule
ssdeep : 196608:UnmSSHHXuBiR1Uqx7vW9gVKs9NUZzyajDhvy7D:Uh60qxb/Ks9SZzyajDhvsD
TLSH : T10FB69F22BBD4852EE27363B15E6AB39AC27EFA700AF1864F335C065F2DB51505D91323
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:3e95b96a-6c31-11ed-a71a-42010aa4000b
File name:6d840000.mso40uiwin32client.dll
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:BitcoinAddress
Create hunting rule
Author:Didier Stevens (@DidierStevens)
Description:Contains a valid Bitcoin address
TLP:TLP:WHITE
Repository:MalwareBazaar
Rule name:pdb_YARAify
Create hunting rule
Author:@wowabiy314
Description:PDB
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.