🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash fc337408f2527254ed87f67ff3cd35271bf849f6a86ca4b74ad551a05b845c7a.

Scan Results


SHA256 hash: fc337408f2527254ed87f67ff3cd35271bf849f6a86ca4b74ad551a05b845c7a
File size:495'616 bytes
File download: Original
MIME type:application/octet-stream
MD5 hash: 3c0a414c811672df408e4a5c77451d4e
SHA1 hash: 77dd3373173a188e26dbcd4919b915d039e96870
SHA3-384 hash: a052a91c1a824b23526adb9f031ab505cfaf5c6b9e0579c5eaa0379cc35df93be91c793838dc3d03476ce8a130364256
First seen:2026-10-30 20:28:57 UTC
Last seen:Never
Sightings:1
imphash :n/a
ssdeep : 12288:5A2x4B2f1/Z5GLFMr39FFUo5KjrEettNoEDCG5:5A2x4B29/ZoLFMrnFV
TLSH :n/a
telfhash :n/a
gimphash :n/a
dhash icon :n/a

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:88b2756a-d4a0-11f1-ae09-42010aa4000b
File name:1b106000.shc
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:exploit_any_poppopret
Author:Jeff White [karttoon@gmail.com] @noottrak
Description:Identify POP -> POP -> RET opcodes for quick ROP Gadget creation in target binaries.
TLP:TLP:WHITE
Repository:karttoon

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.