YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash ca23d9acbcebf4d59175278f3c3b9274efd2b06e2f5d37bd735781b89da95a49.

Scan Results

SHA256 hash: ca23d9acbcebf4d59175278f3c3b9274efd2b06e2f5d37bd735781b89da95a49
File size:1'111'697 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: e9cf406e38f12a5fe2613e77e1c763c5
SHA1 hash: 20efb2c45f2f8fef768fccfeac87384b8529d694
SHA3-384 hash: 2667aa9f8a1d8dc28c11cfa1386f905c2aecca54c815e8ffb9192e59ca6fc7f50a3ce4a5b3cd54bb04a802f6df87fec7
First seen:2026-01-21 06:29:18 UTC
Last seen:Never
Sightings:1
imphash : 4ba28a466d15da0494c9383ae6597e49
Create hunting rule
ssdeep : 24576:NquyPJM7BFJsnx1ekJp/caNgeUms4qQL9XZK/J3Kpdu2G/:NBg27Bu1NBpq4quI/J8duj
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:83ef93a3-f692-11f0-9df4-42010aa4000b
File name:40c096f.dll
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Borland
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:
Rule name:shellcode
Create hunting rule
Author:nex
Description:Matched shellcode byte patterns
TLP:TLP:WHITE
Repository:MalwareBazaar

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.