MalShare

Recently added Samples

SHA256 Hash	File type	Added	Source	Yara Hits
a12b601ab9d70e9eb48c028ac3beb155798428a3e6976060286b5cba809d96d1	PE32	2024-09-30 16:53:34 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/suspicious_packer_section YRP/ASPack_v212_additional YRP/ASPack_v21_additional YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov YRP/ASPack_v212 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/ASPack_v211d YRP/ASProtect_V2X_DLL_Alexey_Solodovnikov_additional YRP/ASPack_212withouth_Poly_Solodovnikov_Alexey YRP/ASPack_v212_Alexey_Solodovnikov YRP/ASPackv212AlexeySolodovnikov YRP/ASProtectV2XDLLAlexeySolodovnikov YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay
c7533786229ceafe2b4d47d4b282f9c340e65fb34bb27b87ceb90c5ebb5427d0	PE32	2024-09-30 16:53:28 UTC	User Submission	YRP/CRC32_poly_Constant YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/gem YRP/screenshot YRP/win_registry YRP/Str_Win32_Winsock2_Library YRP/suspicious_packer_section YRP/UPX YRP/PackerUPX_CompresorGratuito_wwwupxsourceforgenet YRP/UPX_wwwupxsourceforgenet_additional YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay YRP/UPX_v0896_v102_v105_v124_Markus_Laszlo_overlay_additional YRP/UPX_wwwupxsourceforgenet YRP/UPXv20MarkusLaszloReiser YRP/UPXV200V290MarkusOberhumerLaszloMolnarJohnReiser YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
78aae590d7b23d799a54f0e17da85e8ee0acb4a8ea5f542b9a55e4467b180d7b	PE32	2024-09-30 16:53:26 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/VM_Generic_Detection YRP/win_mutex YRP/win_registry YRP/win_private_profile YRP/win_files_operation YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
b88f6c305d8066f04f98419a2705f82976e225b886d0d621ec9aa6fa33c6956f	PE32	2024-09-30 16:53:23 UTC	User Submission	YRP/Prime_Constants_long YRP/CRC32_poly_Constant YRP/CRC32_table [+] YRP/BASE64_table YRP/IP YRP/contentis_base64 YRP/domain YRP/url YRP/nullsoft_streaming_video YRP/excel_XML YRP/gem YRP/pgml YRP/wmf YRP/amf YRP/prc YRP/stl YRP/x3d YRP/_3dxml YRP/System_Tools YRP/create_service YRP/network_tcp_listen YRP/network_http YRP/network_tcp_socket YRP/network_dns YRP/screenshot YRP/keylogger YRP/win_mutex YRP/win_registry YRP/win_token YRP/win_files_operation YRP/Str_Win32_Winsock2_Library YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/Ammyy_Admin_AA_v3 YRP/AHTeam_EP_Protector_03_fake_PCGuard_403_415_FEUERRADER YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasRichSignature FlorianRoth/CN_Actor_RA_Tool_Ammyy_mscorsvw
125d95004ed8bd626a71085d8edebada3dc3d28f7c816001772380c58bf1621a	MS-DOS	2024-09-30 16:53:21 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/IP YRP/contentis_base64 [+] YRP/domain YRP/url YRP/MPRESS_V200_V20X_MATCODE_Software_20090423 YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/mpress_2_xx_x86 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasModified_DOS_Message
edbe46fc7738df840b928646edaa3476319d0d9cb6b80e2aaa5f2ba0823f7dd5	PE32	2024-09-30 16:53:18 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/anti_dbg [+] YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasDebugData YRP/HasRichSignature
18778e15f37db1c0d1cd5a7195ba9492ef42406ad34886e3eed1ab176ab59388	XML	2024-09-30 16:53:16 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/url [+] YRP/excel_XML YRP/pgml YRP/amf YRP/x3d YRP/_3dxml YRP/android_meterpreter
d1146d1cb3ef297aa8e8b200ce4293d5dd72e07609fdffc472f545efe5a071cb	PE32	2024-09-30 16:53:07 UTC	User Submission	YRP/maldoc_getEIP_method_1 YRP/contentis_base64 YRP/domain [+] YRP/gem YRP/prc YRP/anti_dbg YRP/screenshot YRP/keylogger YRP/win_files_operation YRP/win_hook YRP/yodas_Protector_v1033_dllocx_Ashkbiz_Danehkar_h YRP/IsPE32 YRP/IsDLL YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature
b53633ebd5547ce86b28f4ff3c2b5c5c32c139c5437ff003f8c180de059a7dd1	PE32	2024-09-30 16:53:02 UTC	User Submission	YRP/CRC32_poly_Constant YRP/CRC32_table YRP/IP [+] YRP/contentis_base64 YRP/domain YRP/url YRP/png YRP/excel_2007 YRP/excel_XML YRP/corel_draw_compressed YRP/gem YRP/odg YRP/pgml YRP/rip YRP/amf YRP/prc YRP/x3d YRP/_3dxml YRP/_3dxml_compressed YRP/Browsers YRP/anti_dbg YRP/screenshot YRP/win_registry YRP/win_files_operation YRP/Str_Win32_Wininet_Library YRP/Str_Win32_Internet_API YRP/Str_Win32_Http_API YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/HasRichSignature
c6e8bc7a61199b186887750a78134e71909b572d7f37e90c990fc9813bbc17c9	PE32	2024-09-30 16:52:58 UTC	User Submission	YRP/contentis_base64 YRP/domain YRP/Safeguard_103_Simonzh [+] YRP/VC8_Microsoft_Corporation YRP/Microsoft_Visual_Cpp_8 YRP/IsPE32 YRP/IsWindowsGUI YRP/HasOverlay YRP/HasDebugData YRP/HasRichSignature