MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
a8b006066500977c5ec5e6e89663ea496c73d89dae0aeb810facfef0086baf44	PE32	2024-10-01 06:55:36 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/contentis_base64 YRP/domain [+] YRP/DebuggerException__SetConsoleCtrl YRP/escalate_priv YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Borland_Cpp_DLL YRP/Borland_Cpp_for_Win32_1999 YRP/Borland YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay
7a0debf5abf4818c11177879a2a3d1787315cda715338f805d75c405443f9fc7	PE32	2024-10-01 06:55:34 UTC	User Submission	YRP/CRC32b_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/rip YRP/prc YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/inject_thread YRP/escalate_priv YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Internet_API YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
c488f8193f98a518bf3ef917ec607d36fca0a3db0772333c40e18f30e59c88c9	PE32	2024-10-01 06:55:28 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/Safeguard_103_Simonzh YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
771599f5a8b7d669dd97f598f82953d234209b2980c97cb8586b17e49c8cef80	PE32	2024-10-01 06:55:26 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
a8487e27b1a09ab9c6a9eef65184c27f560d7626e32d18d54c774031fac019c9	PE32	2024-10-01 06:55:23 UTC	User Submission	YRP/VC8_Random YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/excel_XML YRP/gem YRP/pgml YRP/rip YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/VM_Generic_Detection YRP/Dropper_Strings YRP/Check_OutputDebugStringA_iat YRP/anti_dbg YRP/antivm_bios YRP/disable_antivirus YRP/screenshot YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Armadillo_v4x YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature
e78dc73846d39a7f94f2b232621b6e4c12a0dde6f7990c9298de415ddf4b601d	PE32	2024-10-01 06:55:21 UTC	User Submission	YRP/VC8_Random YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/prc YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/win_hook YRP/Str_Win32_Winsock2_Library YRP/Armadillo_v2xx_CopyMem_II_additional YRP/Microsoft_Visual_Cpp_70_MFC YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
6da0732ad32b6df363c0504e6003a2ba76efa8ebf83ec30fda75d9e61828957a	PE32	2024-10-01 06:55:18 UTC	User Submission	YRP/domain YRP/suspicious_packer_section YRP/PeCompact_v208_Bitsum_Technologiessignature_by_loveboom [+] YRP/PECompact_2x_Jeremy_Collake YRP/PECompact_20x_Heuristic_Mode_Jeremy_Collake YRP/PECompact_2xx_BitSum_Technologies YRP/PECompact_v2xx YRP/PECompact_V2X_Bitsum_Technologies_additional YRP/PECompact_V2X_Bitsum_Technologies YRP/PECompact_v20_additional YRP/PeCompact_2xx_BitSum_Technologies YRP/PeCompact_253_DLL_BitSum_Technologies_additional YRP/PECompact_v20 YRP/PeCompact_253_DLL_BitSum_Technologies YRP/PECompact_v2xx_additional YRP/PECompactV2XBitsumTechnologies YRP/PECompact2xxBitSumTechnologies YRP/PECompactv2xx YRP/pecompact2 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasDebugData YRP/IsBeyondImageSize YRP/HasRichSignature
2a963d37e417aa37d632df11763889d2a007f7ad7a53473d97b96233daa17b59	XML	2024-10-01 06:55:16 UTC	User Submission	YRP/Big_Numbers1 YRP/contentis_base64 YRP/domain [+] YRP/url YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml
0a0ed4fed1f840cd261fe2478f2a003344aa31e84519f6e24e924b52e27d6075	PE32	2024-10-01 06:55:11 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Microsoft_Visual_Cpp_v50v60_MFC [+] YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasRichSignature
b1626f96063ab6c854e95b464dc07baaa5cccbe6a1d20997f2dee77a13335b3f	PE32	2024-10-01 06:55:06 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/win_files_operation YRP/suspicious_packer_section YRP/UPX YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/IsBeyondImageSize YRP/HasRichSignature