MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
38a636db7fa678949ab552c1fd85e52b2e45bbaa2aed6b45cd25dbe6d3ef7039	PE32	2024-10-01 12:15:56 UTC	User Submission	CuckooSandbox/vmdetect YRP/CRC32_poly_Constant YRP/VC8_Random [+] YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain YRP/url YRP/VMWare_Detection YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/win_registry YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
9bc252b8f4c4d85314c67ecf63a23806e67eae193c1a7ca09d0166509d3dea45	PE32	2024-10-01 12:15:51 UTC	User Submission	YRP/Big_Numbers1 YRP/Big_Numbers2 YRP/Big_Numbers3 [+] YRP/IP YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_C_Basic_NET YRP/NETexecutableMicrosoft YRP/IsPE32 YRP/IsNET_EXE YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData
b9b6697f1d821e0fb9ce69477f0e2bb62abe304a8c112e8dda08644df24071b2	PE32	2024-10-01 12:15:48 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
adcfb053c39daa10dcdca41a5ccfcbde0083139cbda3de2f944ae3cad0ad6f01	PE32	2024-10-01 12:15:46 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/DebuggerException__SetConsoleCtrl [+] YRP/network_tcp_socket YRP/escalate_priv YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
dce713aacdc88caff68c8b778a0e1193d0c74b8502f8d1f615ebd7ac49a5ec83	PE32	2024-10-01 12:15:43 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
f338ba7a2904968c354c27269f44b2c505d7d87a6e4351a6d07a55df71ff6d10	PE32	2024-10-01 12:15:41 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/suspicious_packer_section YRP/Upack_024_beta_Dwing YRP/Upack_v024_v028_Alpha_Dwing YRP/Upack_024_027_beta_028_alpha_Dwing_ YRP/Upack_024_027_beta_028_alpha_Dwing YRP/Upack_02x_Dwing YRP/Upack_V024_V028_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP YRP/Upack_V032_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_V032_Dwing_20080321 YRP/Upack_v029_Beta_v031_Beta YRP/Upack_v01x_v02x_Dwing_additional YRP/Upack_v01x_v02x_Dwing YRP/Upack_V029_V031_Dwingnbsp_nbsp_SignByfly_20080321 YRP/Upack_v029_Beta_v031_Beta_Dwing YRP/Upack_v029_Beta_v031_Beta_Sign_by_hot_UNP_additional YRP/Upack_02x_beta_Dwing YRP/Upack_V024_V028_Dwing_20080321 YRP/Upack_V01X_V02X_Dwing YRP/Upack_v024_v028alpha_Sign_by_hot_UNP_additional YRP/Upack_v024_v028alpha_Sign_by_hot_UNP YRP/Upack_01x_020_021_024_beta_Dwing YRP/Upack_V029_V031_Dwing_20080321 YRP/Upack_024_beta_Dwing_additional YRP/Upackv024v028AlphaDwing YRP/Upackv029Betav031BetaDwing YRP/Upack024027beta028alphaDwing YRP/Upackv01xv02xDwing YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasModified_DOS_Message
31647b36631f260b856d7b50111614a06db8736d73e0e797bcb5f302237a612e	PE32	2024-10-01 12:15:38 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/gem [+] YRP/SEH__vba YRP/Microsoft_Visual_Basic_v50v60 YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/Microsoft_Visual_Basic_v50_additional YRP/Microsoft_Visual_Basic_v50v60_additional YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
638a3a277e55283e7cc8a3d43f6cf678c32b1182c537817d2b143ba2ff2c3074	PE32	2024-10-01 12:15:35 UTC	User Submission	YRP/IP YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
df3eb2346ed4be453e6a1281e22c2dcebcbce4d10f551ca08c79b25834950b02	PE32	2024-10-01 12:15:33 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/prc [+] YRP/screenshot YRP/win_mutex YRP/win_files_operation YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
70fe7883caa1ff094c048b351b7231c563e10d33b3a7ba65e62b6c7cd972edc2	PE32	2024-10-01 12:15:31 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay