MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
cdc74e492ee9370e693983d09386864736bde5fa54b6abf95522cc69cb4d984e	PE32	2024-09-30 08:59:35 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/Delphi_Random [+] YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt YRP/Delphi_DecodeDate YRP/IP YRP/contentis_base64 YRP/domain YRP/prc YRP/Browsers YRP/ThreadControl__Context YRP/network_udp_sock YRP/network_tcp_listen YRP/network_dropper YRP/network_tcp_socket YRP/network_dns YRP/escalate_priv YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland YRP/IsPE32 YRP/IsWindowsGUI YRP/borland_delphi
b3242c5d003adcaf8d3d799e557a56a842ba4565c4ffd19737cbb3f820d3b2b1	PE32	2024-09-30 08:59:31 UTC	User Submission	YRP/CRC32_poly_Constant YRP/maldoc_getEIP_method_1 YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gif_animated YRP/nullsoft_streaming_video YRP/gif_bitmap YRP/gif89a_bitmap YRP/gem YRP/prc YRP/Antivirus YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/suspicious_packer_section YRP/UPX YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/Netopsystems_FEAD_Optimizer_1 YRP/UPX_290_LZMA YRP/UPX_290_LZMA_Markus_Oberhumer_Laszlo_Molnar_John_Reiser YRP/UPX_290_LZMA_additional YRP/UPX_wwwupxsourceforgenet YRP/UPX290LZMAMarkusOberhumerLaszloMolnarJohnReiser YRP/upx_3 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
d59dff60d310557db9c1e56d81b9d92547631968b1efaf22f5db50c9f3b3aac7	PE32	2024-09-30 08:59:28 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/nullsoft_streaming_video [+] YRP/gem YRP/wmf YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
a73ef255657e4007fda705ddfd199e23b1a52e2ca1eb091a41e04838ef2f5983	PE32	2024-09-30 08:59:26 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/suspicious_packer_section YRP/ThemidaWinLicense_V18X_V19X_Oreans_Technologies YRP/Themida_18xx_Oreans_Technologies YRP/ThemidaWinLicense_V1820_p_Oreans_Technologies YRP/ThemidaWinLicense_V1820_p_Oreans_Technologies_Sign_by_fly YRP/ThemidaWinLicense_V18X_V19X_Other_Oreans_Technologies_20080131 YRP/ThemidaWinLicense_V1802_p_Oreans_Technologies YRP/Themida_18xx_Oreans_Technologies_additional YRP/ThemidaWinLicense_V18X_V19X_Other_Oreans_Technologies_SignByfly_20080131 YRP/ThemidaWinLicense_V1802_p_Oreans_Technologies_additional YRP/ThemidaWinLicense_V18X_V2X_Oreans_Technologies_20080131 YRP/ThemidaWinLicenseV1802OreansTechnologies YRP/Themida18xxOreansTechnologies YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
884683e6ea1f2ce373382d607a8ea2be04cfe5b0a758a29857e1ce6c42467344	PE32	2024-09-30 08:59:22 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/screenshot YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/Nullsoft_PiMP_Stub_SFX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
f6fb0b9735cf5b15117c63772451a8c3334684c9748b55231c4148f37d0d9724	PE32	2024-09-30 08:59:20 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
b2ba38d6c0f32922ede91a75ad092d172808b23fadfc38b8f8734857ef1feeb3	PE32	2024-09-30 08:59:17 UTC	User Submission	YRP/Advapi_Hash_API YRP/VC8_Random YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/gem YRP/prc YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
62e790f42d02ec244eccfe82f105a410758e8900e92399311192c26e626c077e	PE32	2024-09-30 08:59:15 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
dfdf33ddddef488370a8d7eecc80ce259181287b1f68b289298ae16c51b58654	PE32	2024-09-30 08:59:11 UTC	User Submission	YRP/MD5_Constants YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/ai_compressed YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/x3d YRP/_3dxml YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/Safeguard_103_Simonzh YRP/ZProtect_v144_lifeengines YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasModified_DOS_Message
5e17aebcbcf8edd291818130cbe7d1c56d9c5c618b7bf261876a6611929f10e2	PE32	2024-09-30 08:59:08 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/wmf [+] YRP/Dropper_Strings YRP/Misc_Suspicious_Strings YRP/SEH__vba YRP/win_registry YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI