YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash f1b611bb8e8bd78a8da835e332d170acc3f7a5ba694348542afd2317ffe049cb.

Scan Results

SHA256 hash: f1b611bb8e8bd78a8da835e332d170acc3f7a5ba694348542afd2317ffe049cb
File size:2'404'744 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: 1755fdbc4c36f964eaf24037eca18cc3
SHA1 hash: 714a2ce25b7e240890aab4dda479592fdccd1b05
SHA3-384 hash: b12228866d76bb07296f3430070e59dbb4516522b7129e9b17fb257b0711368c6bda5eb62ce9df1dedaa13dabf124d8d
First seen:2025-11-21 02:48:18 UTC
Last seen:Never
Sightings:1
imphash : b34f154ec913d2d2c435cbd644e91687
Create hunting rule
ssdeep : 1536:3+nQc1w4vuFv0hEe2+bO0DEtauLkhaLXuq6qSVbp:un77v00hEoDEtauOmcp
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : c4d49e9c9eccd4d4
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:88cd0d88-c684-11f0-adeb-42010aa4000b
File name:1755fdbc4c36f964eaf24037eca18cc3
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:Detect_NSIS_Nullsoft_Installer
Create hunting rule
Author:Obscurity Labs LLC
Description:Detects NSIS installers by .ndata section + NSIS header string
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.