MalShare

SHA256 Hash	File type	Added	Source	Yara Hits
f938c8d802e92d075b1e343209883ce9456ea1b5f59d7e5557f6cce697fcb30f	PE32	2022-02-17 23:44:32	User Submission	CuckooSandbox/vmdetect YRP/Safeguard_103_Simonzh YRP/NoobyProtect_1x_1710_Nooby YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/rat_webcam YRP/win_registry YRP/win_token YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/Str_Win32_Winsock2_Library
f7bf43cbd559b299b9805eeda93c8e64a2d6ce2bc80d16571cb686cca268e9b9	PE32	2022-02-17 22:10:19	User Submission	CuckooSandbox/vmdetect YRP/Safeguard_103_Simonzh YRP/NoobyProtect_1x_1710_Nooby YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/MD5_Constants
cb5ec6a7207a36e81d767e21efdef9122241220f4a19632e08c649e3ba4d343a	PE32	2022-02-17 15:47:40	User Submission	YRP/Safeguard_103_Simonzh YRP/NoobyProtect_1x_1710_Nooby YRP/IsPE32 YRP/IsDLL [+] YRP/IsConsole YRP/IsPacked YRP/HasRichSignature YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/anti_dbg
18c62801fb85d9e3bbb89cf77bf1f41d4a9da5c19fda35edb33eb6e16aad6cea	PE32	2022-02-17 14:37:19	User Submission	CuckooSandbox/vmdetect YRP/Safeguard_103_Simonzh YRP/NoobyProtect_1x_1710_Nooby YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/MD5_Constants
c75f7f501b599976d1016755f894ab9ced79700b834dc1dc1a5544e6173aa9fd	PE32	2022-02-17 03:55:01	User Submission	CuckooSandbox/vmdetect YRP/Safeguard_103_Simonzh YRP/NoobyProtect_1x_1710_Nooby YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/MD5_Constants
f2df4d5092b05144965fad0f39120cf04822a831531b440479f83949f69ff233	PE32	2022-02-16 19:29:56	User Submission	CuckooSandbox/vmdetect YRP/Safeguard_103_Simonzh YRP/NoobyProtect_1x_1710_Nooby YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/MD5_Constants
4ecc520c94bd2df4dae77ba92f31a61f45f89ff2b8c41051ab9c83d93d7edff6	PE32	2022-02-15 22:48:14	User Submission	CuckooSandbox/vmdetect YRP/Safeguard_103_Simonzh YRP/NoobyProtect_1x_1710_Nooby YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/escalate_priv YRP/screenshot YRP/rat_webcam YRP/win_registry YRP/win_token YRP/win_files_operation YRP/CRC32_poly_Constant YRP/CRC32_table YRP/MD5_Constants YRP/Str_Win32_Winsock2_Library
20c231698e105baa32866ab8f98418aa4efae23be3cbcc7523681285ee181a90	PE32	2022-02-15 20:55:17	User Submission	CuckooSandbox/vmdetect YRP/Safeguard_103_Simonzh YRP/NoobyProtect_1x_1710_Nooby YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/ExportTableIsBad YRP/HasRichSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/VirtualPC_Detection YRP/vmdetect YRP/anti_dbg YRP/MD5_Constants
451e3e824a80e720f07a7ccdd123ee78494a41f43a79ad935a668a5c93b01edd	PE32	2022-02-15 20:48:46	User Submission	YRP/NoobyProtect_1x_1710_Nooby YRP/NoobyProtect_SE_Public_V1XXX_Nooby_20090201 YRP/Borland YRP/IsPE32 [+] YRP/IsWindowsGUI YRP/IsPacked YRP/HasOverlay YRP/borland_delphi YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/contentis_base64 YRP/Obfuscated_Strings YRP/ThreadControl__Context YRP/screenshot YRP/keylogger YRP/win_registry YRP/win_files_operation YRP/win_hook YRP/BLOWFISH_Constants YRP/Delphi_Random YRP/Delphi_FormShow YRP/Delphi_CompareCall YRP/Delphi_Copy YRP/Delphi_StrToInt
1107a71ba42a13917c2761e55fb9e8f0251da3c1e44c2f21a9cbcd66d4585a3c	PE32	2020-06-28 01:00:08	User Submission	YRP/Safeguard_103_Simonzh YRP/NoobyProtect_1x_1710_Nooby YRP/IsPE32 YRP/IsWindowsGUI [+] YRP/IsPacked YRP/HasOverlay YRP/HasDigitalSignature YRP/maldoc_find_kernel32_base_method_1 YRP/maldoc_getEIP_method_1 YRP/domain YRP/IP YRP/url YRP/contentis_base64 YRP/network_ssl YRP/MD5_Constants YRP/DES_sbox YRP/CookieTools YRP/suspicious_packer_section

Recent Searches
yrp/noobyprotect_1x_1710_nooby
yrp/dynamicapiloading
yrp/_pseudosigner_02_watcom_ccpp_exe
yrp/seh__vba
yrp/webshell_backdoor_php_agent_r57_mod_bizzz_shell_r57
yrp/microsoft_visual_cpp_v60_debug_version_additional
yrp/expressorfullsupport_v1601_cgsoftlabs_20080308
yrp/fsg_v110_eng_dulekxt_borland_delphi_borland_cpp_additional
yrp/_pseudosigner_01_stelth_pe_101_anorganix_additional
yrp/pespin_v1304_cyberbobnbsp_nbsp_signbyfly_20080310

Search

Recent Searches