YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash fa2f33e5f2339f2c2e60a069c7b3c6318878cb6fe4af7abd58c77ea7b1028c41.

Scan Results

SHA256 hash: fa2f33e5f2339f2c2e60a069c7b3c6318878cb6fe4af7abd58c77ea7b1028c41
File size:188'416 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: deeeb0ff252344d76e7bc5551a978196
SHA1 hash: 4bc93ad23a4a861530749ebb7bfbbdb23af347ed
SHA3-384 hash: 51407b847f5d63039bedf4b1696b69092bcb5baeffd198f873aa38a599d589aed7052ae901cc25ba7404474908cf4ec4
First seen:2025-11-21 02:54:06 UTC
Last seen:Never
Sightings:1
imphash : 5951b823ef2b49d1e906a43d19847e39
Create hunting rule
ssdeep : 3072:2cZfP0oMfNr9ZNKYYYj897CulvnqXcGuWr3:2cSoMXNKc8dCulPqXcGuWr
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon : 1003873db9313e16
Create hunting rule

Tasks

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information

Task ID:58b9c44f-c685-11f0-adeb-42010aa4000b
File name:400000.530b8975-9f1b-4754-a30a-798a59fb0296.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results

The file matched the following open source and commercial ClamAV rules.

Signature:Win.Malware.Zusy-6878655-0
Create hunting rule

YARA Results

Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:pe_no_import_table
Create hunting rule
Author:
Description:Detect pe file that no import table
TLP:TLP:WHITE
Repository:YARAify
Rule name:SEH__vba
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
TLP:TLP:WHITE

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files

The following files could be unpacked from this sample.