YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash bdebaf999063b3203f6dfdf0c61f2f71cea1e190cdb5246e8fdd84133bba81f9.

Scan Results

SHA256 hash: bdebaf999063b3203f6dfdf0c61f2f71cea1e190cdb5246e8fdd84133bba81f9
File size:114'176 bytes
File download: Original
MIME type:application/CDFV2
MD5 hash: 9dd67785a669ba2a0481efe3687d29c1
SHA1 hash: ffc2ee9c31f2a343d21155c9c23a2bc40ed44e98
SHA3-384 hash: b5d2dd02303e2b55c0480459a8c69ac61237c06680c5afda5ebaaba4900fff6281711d9b9d6d71d6a03b9175b3c8f811
First seen:2023-01-25 09:34:36 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 1536:uUv7zLhBjDy5DJUpKa+ypdVwCovsWQDpUic6ZWHmyrd:17zLhBjDywKaTpdVwCovQC16ZWHDr
TLSH : T11BB39125B25AC62FD6A849754CE5E7FC37747C47AF8A4693704C736E6FBA240CA06380
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

You can browse the 10 most recent tasks associated with this file blow.

Task Information

Task ID:7b5209de-9c93-11ed-98c2-42010aa4000b
File name:vbaProject.bin
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:informational_win_ole_protected
Create hunting rule
Author:Jeff White (karttoon@gmail.com) @noottrak
Description:Identify OLE Project protection within documents.
TLP:TLP:WHITE
Repository:karttoon
Rule name:TA505_Maldoc_21Nov_2
Create hunting rule
Author:Arkbird_SOLG
Description:invitation (1).xls
Reference:https://twitter.com/58_158_177_102/status/1197432303057637377
TLP:TLP:WHITE
Repository:StrangerealIntel

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.