Suspicious
Suspect

2a90a22021e34bcca3b159b6669f1aa6

Share on LinkedIn
Print
VB5/6 Executable
MD5: 2a90a22021e34bcca3b159b6669f1aa6
Size: 630.78 KB
application/x-dosexec

This sample is a 616 KB VB5/6 Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 19 embedded or derived files. It matches 11 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
da56679d4d6aef28d0ca9aab937787022d08777508753fda32aa83e10725968e
MD5
2a90a22021e34bcca3b159b6669f1aa6
Verdict
Inconclusive
File type
VB5/6 Executable · 616 KB

Cite this report: https://app.malva.re/sha256/da56679d4d6aef28d0ca9aab937787022d08777508753fda32aa83e10725968e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
630.78 KB · 630,784 B
First seen
2026-08-26 23:00 · 2 months ago
Last seen
2026-08-26 23:00 · 2 months ago
Last analysis
2026-10-26 02:51 · 2 days ago
Hashes
MD5 2a90a22021e34bcca3b159b6669f1aa6 Sha1 901d6f3828c5578a0758fd56fef5249e08abf453 Sha256 da56679d4d6aef28d0ca9aab937787022d08777508753fda32aa83e10725968e Sha384 bd678fb8b48e2377b27e6231cc7b0dd0f75616ab295a4469bb98995fc84128db61c29e6ed1bd5b3dc7dab5a8bbadfd6e Sha512 27b7de843d2e7a8336267a78522502489b615d60db2f278d59e4851c1e3c0dd1c1af87de2725fb96a7b84932f7e5a556bf3cb91b0dd6b9e4b53470ddf365775c SSDeep 12288:HtZ99wR3Y/DOS1bPtkcRqpzg2eAP8KhFJVPjZJTF3H6+5QcHbaaJg4LmI4imA61h:H99pKS1btkvJg2eAP8K/rJa TLSH E0D4F82A63D2F336E811C9F467445338509CEE3414A4AC2BE782770AB7B2ED3A167757
Detection
PeID
Microsoft Visual C++ v6.0 DLL

20 files
EXE2a90a22021e34bcca3b159b6669f1aa6
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

Name Value
VB6 decompilation
VBReFormer 1.0.0+eed41cd404617014a6bab3b9a7b7e1fe6774591b: 16 project files (native).

An error has occurred. This application may no longer respond until reloaded. Reload 🗙