Suspect
2a90a22021e34bcca3b159b6669f1aa6
VB5/6 Executable
MD5: 2a90a22021e34bcca3b159b6669f1aa6
Size: 630.78 KB
application/x-dosexec
This sample is a 616 KB VB5/6 Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 19 embedded or derived files. It matches 11 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- da56679d4d6aef28d0ca9aab937787022d08777508753fda32aa83e10725968e
- MD5
- 2a90a22021e34bcca3b159b6669f1aa6
- Verdict
- Inconclusive
- File type
- VB5/6 Executable · 616 KB
Cite this report: https://app.malva.re/sha256/da56679d4d6aef28d0ca9aab937787022d08777508753fda32aa83e10725968e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
630.78 KB · 630,784 B
First seen
2026-08-26 23:00 · 2 months ago
Last seen
2026-08-26 23:00 · 2 months ago
Last analysis
2026-10-26 02:51 · 2 days ago
Hashes
MD5
2a90a22021e34bcca3b159b6669f1aa6
Sha1
901d6f3828c5578a0758fd56fef5249e08abf453
Sha256
da56679d4d6aef28d0ca9aab937787022d08777508753fda32aa83e10725968e
Sha384
bd678fb8b48e2377b27e6231cc7b0dd0f75616ab295a4469bb98995fc84128db61c29e6ed1bd5b3dc7dab5a8bbadfd6e
Sha512
27b7de843d2e7a8336267a78522502489b615d60db2f278d59e4851c1e3c0dd1c1af87de2725fb96a7b84932f7e5a556bf3cb91b0dd6b9e4b53470ddf365775c
SSDeep
12288:HtZ99wR3Y/DOS1bPtkcRqpzg2eAP8KhFJVPjZJTF3H6+5QcHbaaJg4LmI4imA61h:H99pKS1btkvJg2eAP8K/rJa
TLSH
E0D4F82A63D2F336E811C9F467445338509CEE3414A4AC2BE782770AB7B2ED3A167757
Detection
PeID
Microsoft Visual C++ v6.0 DLL
20 files
EXE2a90a22021e34bcca3b159b6669f1aa6
Structure
BINVB6
BINDecompilation
BIN[VB6 project]
TXTHHQICVBB.vbp
FRMDLMLAPTN.frm
FRMANTEFHSSNNQHF.frm
FRXANTEFHSSNNQHF.frx
FRMEJCKPHRQWWB.frm
FRMLJCXIMZU.frm
BASQPKKXQVNLV.bas
BASIKSPIVNHB.bas
BASYTONVOGQHG.bas
BASVEKUDO.bas
BASMMJCGOBK.bas
BASUSTVZOLRFDHT.bas
CLSQWLPOOLTVTW.cls
BASVBRF_Types.bas
BASVBRF_Inconnu.bas
TXTEXPORT-NOTES.txt
BINResources
BINTYPELIB
BINID:0001
BINID:0
BIN_IID_QWLPOOLTVTW
BINID:0001
BINID:0
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| VB6 decompilation | VBReFormer 1.0.0+eed41cd404617014a6bab3b9a7b7e1fe6774591b: 16 project files (native). |
20 files
EXE2a90a22021e34bcca3b159b6669f1aa6
Structure
BINVB6
BIN[VB6 project]
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account