YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash eaa35b979cf2b9d6055a0741e495750fdd7040add3171679efc5708eed15f511.

SHA256 hash:	eaa35b979cf2b9d6055a0741e495750fdd7040add3171679efc5708eed15f511
File size:	598'128 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	2ce434e933f729f2096713e897851a17
SHA1 hash:	d7643ab1e3137cf680c71e6f50f3f63b5f6e5909
SHA3-384 hash:	88c97f3ff5561cd5f0d87a4f21d358c7ed9d58093c6e5bf482700af47f6c85e7e251c4882fd7bd2e2b958e802672a11a
First seen:	2026-02-11 17:45:08 UTC
Last seen:	Never
Sightings:	1
imphash :	38349e26f6f2cd2de420f9ac4938b49f Create hunting rule
ssdeep :	12288:ccJYdxE7bAlKmhDmHo8bwoB0CGczHs3oYS8O2bMbUMg3m:vWduUlKVoZoB0CHs3rzbMbUF3m
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	Check_OutputDebugStringA_iat Create hunting rule
TLP:	TLP:WHITE
Repository:

Rule name:	cobalt_strike_tmp01925d3f Create hunting rule
Author:	The DFIR Report
Description:	files - file ~tmp01925d3f.exe
Reference:	https://thedfirreport.com
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	DebuggerCheck__API Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	pe_detect_tls_callbacks Create hunting rule
Author:
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-02-11 17:45:08 UTC Static: 5 Unpacker: 0 ClamAV: 0