YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash e2a24f27c6e2e3e6a44ca2728bae673efdf614af9b34331abfdb56ca32f6cf9e.

Scan Results

SHA256 hash: e2a24f27c6e2e3e6a44ca2728bae673efdf614af9b34331abfdb56ca32f6cf9e
File size:1'032'237 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 111f3fce36c7f6afc4913809fef60a6b
SHA1 hash: 70bf2f5f5722ac63da6c4e6aacff4137c618c031
SHA3-384 hash: a5cb38635f2e2b64eb4e55e86529d3ce99823cb338e2142e066b51da2e9eceaf087e7298efff92ddea62083b21a44bc5
First seen:2025-11-20 23:52:49 UTC
Last seen:Never
Sightings:1
imphash : aa77d18b40072a7e1dc36630aafffd27
Create hunting rule
ssdeep : 12288:kju8vaa81soeyezSC6v7XiLKK3kg5aqghpSy1TIPxTmqCLwKzu/h:kjba7/ezSC6vryD/aqgrvWx6q8wyup
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:05035d53-c66c-11f0-adeb-42010aa4000b
File name:111f3fce36c7f6afc4913809fef60a6b
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:PUA.Win.Packer.XcompXpack-2
Create hunting rule
Signature:PUA.Win.Packer.XcompXpack-3
Create hunting rule
Signature:PUA.Win.Packer.Xpack-1
Create hunting rule
Signature:PUA.Win.Packer.Xpack-16
Create hunting rule
Signature:Win.Dropper.Zombie-10044469-0
Create hunting rule
Signature:Win.Packed.Generic-10044475-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:DetectEncryptedVariants
Create hunting rule
Author:Zinyth
Description:Detects 'encrypted' in ASCII, Unicode, base64, or hex-encoded
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.