MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
cc6f35adea42d107c08daead399a7f4dc9585f6021669d9f5ccd653086af3c8f	PE32	2024-09-30 15:02:14 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
03501dd232848f38f8fac5b3f61380619f8f2087da97c3c4f5724f22097d9231	PE32	2024-09-30 15:02:06 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/png YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/Misc_Suspicious_Strings YRP/DebuggerCheck__QueryInfo YRP/DebuggerException__SetConsoleCtrl YRP/disable_dep YRP/win_mutex YRP/IsPE32 YRP/IsConsole YRP/IsPacked YRP/HasDebugData YRP/HasRichSignature
b242c447e46617c4804747a98bfd862cf9e314aade9fea2311ddce0645ecde69	PE32	2024-09-30 15:02:03 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/rip [+] YRP/possible_includes_base64_packed_functions YRP/Armadillo_v171 YRP/Microsoft_Visual_Cpp_v60 YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional YRP/Microsoft_Visual_Cpp_50 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Armadillo_v171_additional YRP/Microsoft_Visual_Cpp YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature
dd1adc049cf5718060e9b7a75bf4bc8afc45ad36bb4182fd3880ca846e19054a	PE32	2024-09-30 15:02:01 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/screenshot [+] YRP/win_registry YRP/win_files_operation YRP/FSG_v110_Eng_dulekxt_ YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay
081aaa4039df136172f6382e3afa40740cbe4f05414a825192b26667a2759eea	PE32	2024-09-30 15:01:57 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/dirac YRP/nullsoft_streaming_video YRP/excel_XML YRP/gem YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/escalate_priv YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Borland_Delphi_40_additional YRP/Inno_Installer_v512_collides_with_Borland_Delphi_20_Overlay YRP/Inno_Installer_v512 YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Inno_Setup_Module_v5 YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature
87c4ec6a29278ff2cdc7cd38bee6fdd562f5c82df78101f8d4949686fb5c983d	PE32	2024-09-30 15:01:46 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/SEH__vba [+] YRP/Microsoft_Visual_Basic_v50 YRP/Microsoft_Visual_Basic_v50_v60 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasRichSignature
47fafcc4ecb69bfc3bf7a58c9846e0c1f0c1fb16eaf34224e23a09fc3237230e	PDF	2024-09-30 15:01:43 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
0dec5b81d6c0b195f73e1bec2c403a7aa9c813a0bd3c99bcb4efca964dabf1bc	PE32	2024-09-30 15:01:39 UTC	User Submission	YRP/maldoc_find_kernel32_base_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/excel_XML YRP/gem YRP/x3d YRP/anti_dbg YRP/win_files_operation YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsConsole YRP/HasDebugData YRP/HasRichSignature
ff4ce0f5b645b49dc3da894ca16fc947fef87bf4f793291dd6d7cd0f9cfcaaa2	PDF	2024-09-30 15:01:36 UTC	User Submission	YRP/Big_Numbers1 YRP/invalid_trailer_structure YRP/multiple_versions [+] YRP/contentis_base64 YRP/domain YRP/url YRP/pdf YRP/jpeg
5a2b0bf52a54f2f2197047fddc8706e2659d3845d8624f5f419739e20415828e	PE32	2024-09-30 15:01:31 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Borland_Delphi_40_additional [+] YRP/Microsoft_Visual_Cpp_v50v60_MFC YRP/Borland_Delphi_30_additional YRP/Borland_Delphi_30_ YRP/Borland_Delphi_Setup_Module YRP/Borland_Delphi_40 YRP/Borland_Delphi_v40_v50 YRP/Themida_10xx_18xx_no_compression_Oreans_Technologies YRP/Borland_Delphi_v30 YRP/Borland_Delphi_DLL YRP/IsPE32 YRP/HasRichSignature FlorianRoth/DragonFly_APT_Sep17_3