YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash c1ac5b28f011f648be5f76e4e2307ddaba71398e2aec189157d91774e29e1b2a.

Scan Results

SHA256 hash: c1ac5b28f011f648be5f76e4e2307ddaba71398e2aec189157d91774e29e1b2a
File size:1'527'808 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 493bc7ded34c749f34e7cc424902fa36
SHA1 hash: a6f974eb79957ff715b43da836d7adc232e0977b
SHA3-384 hash: 66820a6d88a0685158628f1ae8be6d1d0053071655587ff53de8fb8901b231fe2416836b21ab3a528fc7ce0217af5a12
First seen:2025-12-18 02:24:28 UTC
Last seen:Never
Sightings:1
imphash : 9ffe85bebb9ca72baaad23792edb66a1
Create hunting rule
ssdeep : 24576:uPrRNd/f8Fq1U2A3JJBwuCx59U4IgL5prf:qfC95JBwuOTU4I
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : bae2e5e7e5a5a69a
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:ae179101-dbb8-11f0-9df4-42010aa4000b
File name:73f80000.user32.dll
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DebuggerCheck__QueryInfo
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE
Rule name:DebuggerHiding__Thread
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.