Suspicious
Suspect

343c755fd6fe653b80d16c0af280f147

VB5/6 Executable
MD5: 343c755fd6fe653b80d16c0af280f147
Size: 1.17 MB
application/x-dosexec

This sample is a 1.1 MB VB5/6 Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 23 embedded or derived files. It matches 4 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
68dcb7b0ddb39c45cc340bb52b69961a3865aa533ca8a49c22a7f0e3ad66a51e
MD5
343c755fd6fe653b80d16c0af280f147
Verdict
Inconclusive
File type
VB5/6 Executable · 1.1 MB

Cite this report: https://app.malva.re/sha256/68dcb7b0ddb39c45cc340bb52b69961a3865aa533ca8a49c22a7f0e3ad66a51e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
Portable Executable file
Size
1.17 MB · 1,167,360 B
First seen
2026-06-27 13:01 · 4 months ago
Last seen
2026-06-27 13:01 · 4 months ago
Last analysis
2026-10-26 02:40 · 2 days ago
Hashes
MD5 343c755fd6fe653b80d16c0af280f147 Sha1 eeeba78eba7c24abc1e69c5951db09d7ba4b4259 Sha256 68dcb7b0ddb39c45cc340bb52b69961a3865aa533ca8a49c22a7f0e3ad66a51e Sha384 d50f84048ffa24cfa452cf0ce79cd05c67ee4c18091116634e30b467872730a590363b732d2784e5163a39eacbe1d6e5 Sha512 391fbe26f274f144daa437081d140ebe49c26bdfff437254faa516f5adeb53d51e48260cdb4e0e103f10ee7e87f31b870e41de604aba2649ec84695cba946619 SSDeep 12288:N7YJIB0xPwLjCTo2jkGnY3IXS4dsgK9eRGYNo3ec6k+USVhgUmM6suTwfikQ2qjz:N8WB2c15dwPHDOJ0GnSdbu6G3 TLSH 49453B4F35F72F68EE9A8F3F13005E1485EA98440145F727A18036A6BBCAE471B879D7
Detection
PeID
Microsoft Visual Basic v6.0 DLL

24 files
EXE343c755fd6fe653b80d16c0af280f147
Structure
BINVB6
BINDecompilation
BIN[VB6 project]
TXTProyecto1.vbp
BASzxefmxxdi.bas
BAStnblrypyr.bas
BASdvjubiyha.bas
BASyrlykqxow.bas
BAShbthsygwf.bas
BASyslykqxow.bas
BASysmzkqxox.bas
BASoicpbhnfn.bas
BASgathsygwf.bas
BASatnbmsyqy.bas
BASnhboyfmdm.bas
CLSClass1.cls
BASModule1.bas
CTLUserControl1.ctl
BASModule2.bas
BASModule3.bas
BASModule4.bas
CLSClass2.cls
TXTEXPORT-NOTES.txt
BINResources
BINTYPELIB
BINID:0001
BINID:0
BIN_IID_CLASS2
BINID:0001
BINID:0
BINRT_VERSION
BINID:0001
BINID:3082
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

Name Value
VB6 decompilation
VBReFormer 1.0.0+eed41cd404617014a6bab3b9a7b7e1fe6774591b: 20 project files (native).

24 files
EXE343c755fd6fe653b80d16c0af280f147
Structure
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙