YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 48fba6b69b2cfc14e4358b21d7947380e3c9dd85825847a93eb37da78a4c8971.

SHA256 hash:	48fba6b69b2cfc14e4358b21d7947380e3c9dd85825847a93eb37da78a4c8971
File size:	6'279'696 bytes
File download:	Original
MIME type:	application/x-dosexec
MD5 hash:	5d78158a581784bda91625398be277b4
SHA1 hash:	7d6b6ced3ec66f1daa36576e3fc1d931da7f9572
SHA3-384 hash:	0fc9e51f3b73014deaa7657619d30166728aaac9edd72d9c6370071a697d6543e41115c6e23569ec2937b93bb067228b
First seen:	2025-08-24 22:15:34 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	49152:oiXdbOBRefdpAE1kx6BTRsUSqBZC/vnw4SAVhMG+0iVhacE9Simpa6ifil:oiXBOBReFT46wX6C/rSY+0Ocp9Sngil
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	INDICATOR_EXE_Packed_Themida Create hunting rule
Author:	ditekSHen
Description:	Detects executables packed with Themida
TLP:	TLP:WHITE
Repository:	diˈtekSHən

Rule name:	pe_detect_tls_callbacks Create hunting rule
Author:
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	pe_no_import_table Create hunting rule
Author:
Description:	Detect pe file that no import table
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	Sus_Obf_Enc_Spoof_Hide_PE Create hunting rule
Author:	XiAnzheng
Description:	Check for Overlay, Obfuscating, Encrypting, Spoofing, Hiding, or Entropy Technique(can create FP)
TLP:	TLP:WHITE
Repository:	YARAify

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-08-24 22:15:34 UTC Static: 5 Unpacker: 0 ClamAV: 0