YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash ce21793282e94d36b3d4b7646c73a6aff854e4b4e3595b0d2b673d7957d6c1b1.

Scan Results

SHA256 hash: ce21793282e94d36b3d4b7646c73a6aff854e4b4e3595b0d2b673d7957d6c1b1
File size:32'768 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: a881ef40fc35a7a7c88921911fc86850
SHA1 hash: 319378d2b63fd85645c64fd63547874f9ec14502
SHA3-384 hash: a65986c98cd4515fc9c46aca137e15e44f6312ec3c1cd212d7640716b0e656bf180be49e8f820417fd801d2dd24fdd03
First seen:2026-02-11 17:40:31 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 192:1U7ksrFGTNeQgPgvUetN9jLhmhwX9juE/:1U7JsT4dPRKN9g2tjuE
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:c325bbfc-0770-11f1-82f6-42010aa4000b
File name:2da0000.dll
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
TLP:TLP:WHITE
Repository:YARAify
Rule name:UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser
Create hunting rule
Author:malware-lu
TLP:TLP:WHITE
Repository:

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.