YARAify Scan Results
You are viewing the YARAify database entry for the file with the SHA256 hash a8244fd3a9cdad272c647083b51b847a2530c26c7a053ca2f91d463ff5a06577
.
Scan Results
SHA256 hash: | a8244fd3a9cdad272c647083b51b847a2530c26c7a053ca2f91d463ff5a06577 | |
---|---|---|
File size: | 38'208 bytes | |
File download: | Original | |
MIME type: | application/x-dosexec | |
MD5 hash: | 1b6f14893c2b640db0b05bf166af6aa1 | |
SHA1 hash: | 9dac1cd488380fc688281e90875f266807e13721 | |
SHA3-384 hash: | 72037d3e65e3439be2c865cea4881c61a2c1702bad3daf9b0f981eba36522bb9bdb5b59eb00261a6c846096e7da09eab | |
First seen: | 2025-08-24 22:16:43 UTC | |
Last seen: | Never | |
Sightings: | 1 | |
imphash : | 677e4cf676403d2b76c5adbd88df5afd | |
ssdeep : | 384:rHh50gmTTKeyMCQhgbImrgaMXAuRmH0gBKkOTiGEU7kds4iS46gLFQ4DBVKt14:rHhTnQh4drgXy71OTiDzuFQ4DBVKt14 | |
TLSH : | n/a | |
telfhash : | n/a | |
gimphash : | n/a | |
dhash icon : | c09c9888d8a8a490 |
Tasks
There are 1 tasks on YARAify for this particular file. The 10 most recent ones are shown below.
Task Information
Task ID: | 0466df05-8138-11f0-8fb7-42010aa4000b | |
---|---|---|
File name: | 1b6f14893c2b640db0b05bf166af6aa1 | |
Task parameters: | ClamAV scan: | True |
Unpack: | False | |
Share file: | True |
ClamAV Results
The file matched the following open source and commercial ClamAV rules.
Signature: | Win.Trojan.Downloader-66142 |
---|
Signature: | Win.Trojan.Downloader-66143 |
---|
Signature: | Win.Trojan.Downloader-66144 |
---|
Signature: | Win.Trojan.Zbot-57926 |
---|
YARA Results
Static Analysis
The following YARA rules matched on the file (static analysis).
Rule name: | DebuggerCheck__API |
---|---|
Reference: | https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara |
TLP: | TLP:WHITE |
Rule name: | Sus_Obf_Enc_Spoof_Hide_PE |
---|---|
Author: | XiAnzheng |
Description: | Check for Overlay, Obfuscating, Encrypting, Spoofing, Hiding, or Entropy Technique(can create FP) |
TLP: | TLP:WHITE |
Repository: | YARAify |
Unpacker
The following YARA rules matched on the unpacked file.
Disabled by submitter
Unpacked Files
The following files could be unpacked from this sample.
Disabled by submitter