Suspect
1c91f7290172e088867d9ff0406e2bc0
VB5/6 Executable
MD5: 1c91f7290172e088867d9ff0406e2bc0
Size: 417.79 KB
application/x-dosexec
This sample is a 408 KB VB5/6 Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 20 embedded or derived files. It matches 12 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c348e7341539d4320335a863e0358be6380743d5a3b5a4f60d0acb852d9a985e
- MD5
- 1c91f7290172e088867d9ff0406e2bc0
- Verdict
- Inconclusive
- File type
- VB5/6 Executable · 408 KB
Cite this report: https://app.malva.re/sha256/c348e7341539d4320335a863e0358be6380743d5a3b5a4f60d0acb852d9a985e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
417.79 KB · 417,792 B
Hashes
MD5
1c91f7290172e088867d9ff0406e2bc0
Sha1
f98b73bdbe0f546c4f68c9914803f6221c662a38
Sha256
c348e7341539d4320335a863e0358be6380743d5a3b5a4f60d0acb852d9a985e
Sha384
f5c794fea4f9d798b6b022052d982a32b25943e96e34988674f392bc4eb7ea00800b8d44c1da54a207f3335575c8991c
Sha512
b1a739b14b20d4f64c90cb7355dc6afb2a7bda7000846672884bd4b6a8df298ec021c65a14cd005a2390d13df690cbef67156c2bbd6b651bd594e88dc06d092a
SSDeep
6144:4yEL1xJkbxt0QL7RqATUG8BAta/jZFZ88td7IA2a1FW+tyAdPmkqmaEZ4b:47ZrDQL7RqATUG8BAtavh2GW+tr6
TLSH
9294F612EA20B0A5F85345B03D78A24A79292D7A2640ED0BF78EDF9637B059371F531F
Detection
PeID
Microsoft Visual Basic v5.0 - v6.0Microsoft Visual C++ v6.0 DLL
21 files
EXE1c91f7290172e088867d9ff0406e2bc0
Structure
BINVB6
BINDecompilation
BIN[VB6 project]
TXTSIS.vbp
FRMfrmLogin.frm
FRXfrmLogin.frx
FRMfrmMain.frm
FRXfrmMain.frx
CTLjcbutton.ctl
FRMfrmStudents.frm
BASConnection.bas
FRMfrmUserInfo.frm
BASCapture.bas
BASFunctions.bas
FRMfrmReports.frm
BASModule1.bas
BASModule2.bas
BASVBRF_Types.bas
BASVBRF_Inconnu.bas
TXTEXPORT-NOTES.txt
BINResources
BINRT_ICON
BINID:7531
BINID:0
BINRT_GROUP_CURSOR4
BINID:0001
BINID:0
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| VB6 decompilation | VBReFormer 1.0.0+eed41cd404617014a6bab3b9a7b7e1fe6774591b: 17 project files (native). |
21 files
EXE1c91f7290172e088867d9ff0406e2bc0
Structure
BINVB6
BIN[VB6 project]
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account