YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash fb5ca4924ba89419eca4d63ce17dc9a1d3be944ec58c30489f2403e491396222.

Scan Results


SHA256 hash: fb5ca4924ba89419eca4d63ce17dc9a1d3be944ec58c30489f2403e491396222
File size:6'362'781 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: ac2d9d12b26578054a55fd9560bf91ae
SHA1 hash: e5a412d22624ad85813a68d766a4cb5990ab7e9a
SHA3-384 hash: a0b43d5a4167d7fbf6d005f7ba3868d677d2fe561402a156ae036ecd589fa2abc79e3fd4f45e1dd8a510a728862768e1
First seen:2022-11-24 19:52:33 UTC
Last seen:Never
Sightings:1
imphash : 5d28bc7ce4b2da570758e8d3ed042561
ssdeep : 98304:iJhlKgV8kiIq+GBgQqoxMXvb3VfB/q84EMMTG3Y2T:SCwvlB/q84EM/Y
TLSH : T1B456BDB1750AB1CFD36A2EB49517CD43975E03F782245806EC6DB8BDAE63C8251CBE24
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


You can browse the 10 most recent tasks associated with this file blow.

Task Information


Task ID:89b4971a-6c31-11ed-a71a-42010aa4000b
File name:400000.explorer.exe
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:Win.Packed.0000436da-9978792-0
Signature:Win.Trojan.VBGeneric-6735875-0

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:INDICATOR_EXE_Packed_Themida
Author:ditekSHen
Description:Detects executables packed with Themida
TLP:TLP:WHITE
Repository:ditekshen

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.