YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 15b7fafc57167b071a2a97356c9df1ed340547d2b13d2ba0fccc22c9852d066c.

SHA256 hash:	15b7fafc57167b071a2a97356c9df1ed340547d2b13d2ba0fccc22c9852d066c
File size:	40'766 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	6917f49e989848971c3afae27297d934
SHA1 hash:	fc1f714d15fb2768595a78fda1dae5f5f18db1ab
SHA3-384 hash:	dfd247df79d278ee6d1d8b0cf0a8911749f69693772ba88c434ca5da3793879ee908d91c7ffb3c06d072c9b3700e46be
First seen:	2025-04-03 02:33:04 UTC
Last seen:	Never
Sightings:	1
imphash :	ca6b71be3115c367c292134d267c17ba Create hunting rule
ssdeep :	384:BZpiEwKOAYzlI4GS1dxBm6DdAgJB2OxI+VbPeuaBU3losjuzZ6UwYRGZqS7ACWZQ:JiEw1zK7gJ1PP3lLuzZPKqjvIFDp4m
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	golang_bin_JCorn_CSC846 Create hunting rule
Author:	Justin Cornwell
Description:	CSC-846 Golang detection ruleset
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	pe_detect_tls_callbacks Create hunting rule
Author:
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	Sus_Obf_Enc_Spoof_Hide_PE Create hunting rule
Author:	XiAnzheng
Description:	Check for Overlay, Obfuscating, Encrypting, Spoofing, Hiding, or Entropy Technique(can create FP)
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	win_whispergate_auto Create hunting rule
Author:	Felix Bilstein - yara-signator at cocacoding dot com
Description:	Detects win.whispergate.
TLP:	TLP:WHITE
Repository:	Malpedia

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-04-03 02:33:04 UTC Static: 5 Unpacker: 0 ClamAV: 0