YARAify Scan Results

You are viewing the YARAify database entry for the file with the SHA256 hash 982a4e0f652c6493b5943e519d918f90362e88833f32f3cd7055067333fc73b8.

SHA256 hash:	982a4e0f652c6493b5943e519d918f90362e88833f32f3cd7055067333fc73b8
File size:	1'354'688 bytes
File download:	Original
MIME type:	application/pdf
MD5 hash:	4974e6d6df48f143de9b0f75d5ab5127
SHA1 hash:	052c550b409ed5384ab90764f1fb8ceac813d9a7
SHA3-384 hash:	9bf1bc4d959c51fde16d512a4e4039f6683270e0f209741dbb97383d7d6f301ca4348bac7b523bc805465e40f16e6122
First seen:	2025-07-03 09:21:26 UTC
Last seen:	Never
Sightings:	1
imphash :	n/a
ssdeep :	24576:0xioHT+FNyHeESR74sA0CWFhwuXm/m2w/2xJ4d7HYvQn0gVSVsxkDgZi4n:IYy+FEsAzMyCim5+xK4HgVjkDgZi4n
TLSH :	n/a
telfhash :	n/a
gimphash :	n/a
dhash icon :	n/a

There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.

Task ID:	189e30b7-57ef-11f0-a223-42010aa4000b
File name:	API_Aide Memoire MozNorteMay 2025.pdf
Task parameters:	ClamAV scan:	True
	Unpack:	False
	Share file:	False

The file matched the following open source and commercial ClamAV rules.

No matches

The following YARA rules matched on the file (static analysis).

Rule name:	Sus_Obf_Enc_Spoof_Hide_PE Create hunting rule
Author:	XiAnzheng
Description:	Check for Overlay, Obfuscating, Encrypting, Spoofing, Hiding, or Entropy Technique(can create FP)
TLP:	TLP:WHITE
Repository:	YARAify

Rule name:	vmdetect Create hunting rule
Author:	nex
Description:	Possibly employs anti-virtualization techniques
TLP:	TLP:WHITE
Repository:

The following YARA rules matched on the unpacked file.

Disabled by submitter

The following files could be unpacked from this sample.

Disabled by submitter

2025-07-03 09:21:27 UTC Static: 2 Unpacker: 0 ClamAV: 0