YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash c77350760045299cffa42b722bdbfab0d3f26f5b010ddb0caaeb7e61a003a661.

Scan Results

SHA256 hash: c77350760045299cffa42b722bdbfab0d3f26f5b010ddb0caaeb7e61a003a661
File size:76'288 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 0312f68941ddfab681ed695c657c948e
SHA1 hash: 64f4e146d921026c14f6e55636f2c02c6d9ad32e
SHA3-384 hash: 3ab3744f7340f85c8121e856601a4143afcc53518e49ff961b7057565a0883028f11bb653f2b7da4f979bf08296ad372
First seen:2025-11-20 23:55:15 UTC
Last seen:Never
Sightings:1
imphash : 8548db8f60c204814dcfae0b498b2735
Create hunting rule
ssdeep : 1536:q7qnkAQtSaoGo5n4iLG0/WM6T3EKHSaYqemmjxJ:DCSjGoLpWM6bblmjxJ
TLSH : T13D731965B28CB376C0F2A9B89E0DF2E5BC247E301E19185BB5EE1F0DDA7B1C2560C195
Create hunting rule
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:5c59e8fb-c66c-11f0-adeb-42010aa4000b
File name:0312f68941ddfab681ed695c657c948e
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Trojan.Philis-85
Create hunting rule
Signature:Win.Worm.Viking-3522
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Borland
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:TLP:WHITE
Repository:YARAify
Rule name:HUNTING_SUSP_TLS_SECTION
Create hunting rule
Author:chaosphere
Description:Detect PE files with .tls section that can be used for anti-debugging
Reference:Practical Malware Analysis - Chapter 16
TLP:TLP:WHITE
Repository:YARAify
Rule name:pe_detect_tls_callbacks
Create hunting rule
Author:
TLP:TLP:WHITE
Repository:YARAify
Rule name:ThreadControl__Context
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.