NEW | Hunt across all abuse.ch platforms with one simple query - discover if an IPv4 address, domain, URL or file hash has been identified on any platform from a centralized search tool. Test it out here hunting.abuse.ch - and happy hunting 🔍

YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 927c09b38805740b569b830ae245d02ee71211327c505fbf0a718a7b4056f055.

Scan Results


SHA256 hash: 927c09b38805740b569b830ae245d02ee71211327c505fbf0a718a7b4056f055
File size:362'496 bytes
File download: Original
MIME type:application/x-dosexec
MD5 hash: e3cc560c73b91641fb5b418ea881d389
SHA1 hash: ef44cd4a86e1f7fd8000c6b08ae1b7c9fe3a4a19
SHA3-384 hash: d260da88664f46ba7400a8fb88fe24a7e6e8c3ecc7ac024e5633414b1ec01a3f795eac1003819a10586b69e5e97223e7
First seen:2024-09-20 08:29:11 UTC
Last seen:Never
Sightings:1
imphash : 395a8acbc5a7163d6ee35fc21736b681
ssdeep : 6144:aiOgCOUoL9sewNglEO/JUYfxVc5Iv01RtazG3TpqRIjVCZFmrMD2u5Lh5aszuQ:Xpso/+8Pc5IsWhKjAtD/5Lh5aO
TLSH :n/a
telfhash :n/a
gimphash :n/a
File icon (PE):PE icon
dhash icon : f0f4caaa9eccccf0

Tasks


There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task Information


Task ID:69e0ac1d-772a-11ef-b6ec-42010aa4000b
File name:e3cc560c73b91641fb5b418ea881d389
Task parameters:ClamAV scan:True
Unpack:False
Share file:True

ClamAV Results


The file matched the following open source and commercial ClamAV rules.

Signature:Win.Trojan.Scar-772

YARA Results


Static Analysis

The following YARA rules matched on the file (static analysis).

Rule name:pe_detect_tls_callbacks
Author:
TLP:TLP:WHITE
Repository:YARAify

Unpacker

The following YARA rules matched on the unpacked file.

Unpacked Files


The following files could be unpacked from this sample.