YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash f56a438ae964c377ed5ffbd0855588f64ed5b2356dee88d7883fa69512b24f0e.

SHA256 hash:	f56a438ae964c377ed5ffbd0855588f64ed5b2356dee88d7883fa69512b24f0e
File size:	20'480 bytes
File download:	Original
MIME type:	application/octet-stream
MD5 hash:	c9456f3b72c692030b7aa1b96745629e
SHA1 hash:	928e6f9c93af44a0dcfe91a3b14785e5b2c99c4e
SHA3-384 hash:	caa39600697bb4ce9c66d5b03ced2969efb1df295aacfe200ce9164f45b697c8a9f207080a96110afefd1a2f0bf1ee2b
First seen:	2026-10-31 09:49:58 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	384:N4/FOlGkRLVdn+eKGA097MrlBgZletv9w+vz0DUSIvr:NWFOlGkRLVF+09wBJ9w+vz04Xj
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	exploit_any_poppopret Create hunting rule
Author:	Jeff White [karttoon@gmail.com] @noottrak
Description:	Identify POP -> POP -> RET opcodes for quick ROP Gadget creation in target binaries.
TLP:	TLP:WHITE
Repository:	karttoon

Rule name:	meth_stackstrings Create hunting rule
Author:	Willi Ballenthin
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	SEH__vectored Create hunting rule
Reference:	https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:	TLP:WHITE

Rule name:	Windows_Ransomware_Azov_e1ef131e Create hunting rule
Author:	Elastic Security
TLP:	TLP:WHITE
Repository:	elastic

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2026-10-31 09:49:58 UTC Static: 4 Unpacker: 0 ClamAV: 0