Suspect
8b62d1fae5707198c74c9bd3e27aa922
VB5/6 Executable
MD5: 8b62d1fae5707198c74c9bd3e27aa922
Size: 1.02 MB
application/x-dosexec
This sample is a 1000 KB VB5/6 Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 12 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c2386ea75e2c185bee094b845498e6c750217349cf3f965b3832b39fad241c09
- MD5
- 8b62d1fae5707198c74c9bd3e27aa922
- Verdict
- Inconclusive
- File type
- VB5/6 Executable · 1000 KB
Cite this report: https://app.malva.re/sha256/c2386ea75e2c185bee094b845498e6c750217349cf3f965b3832b39fad241c09
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
1.02 MB · 1,024,000 B
First seen
2026-09-05 02:00 · one month ago
Last seen
2026-09-05 02:00 · one month ago
Last analysis
2026-10-26 02:39 · 2 days ago
Hashes
MD5
8b62d1fae5707198c74c9bd3e27aa922
Sha1
1c453fc232a2bbf3b3f3dc7cf263f4fde825e94e
Sha256
c2386ea75e2c185bee094b845498e6c750217349cf3f965b3832b39fad241c09
Sha384
2d15d72b0bc5c6e64f03dec589091e08c5c00a8f6dc8e4fa371b3c3c65573383617efa71e0131f4d81ee0a2597ae49db
Sha512
b72c38165d3c61e5303c8a6b99ca687ac7181575160e064cbe635e3593620c2a85596be3cf9716da9620b3b941e3c5dc6cc8dc589d14c54e83e2273a7afb967b
SSDeep
12288:dSMGVUdY1HMiVHpj7ypnLskDHvsfXwvP2:dN464MiVHpj7ypnLskDHvsfXwvP2
TLSH
9E259DB36211BF3AD1630371B754C279D2BE3D7AF1120944720BB27560B69EC2ABD729
Detection
PeID
Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0Microsoft Visual Basic v5.0 - v6.0Private EXE Protector V2.30-V2.3X -> SetiSoft Team
13 files
EXE8b62d1fae5707198c74c9bd3e27aa922
Structure
BINVB6
BINDecompilation
BIN[VB6 project]
TXTvb4projectVb.vbp
FRMINKRunsus.frm
FRXINKRunsus.frx
FRMINKRsubcl.frm
FRXINKRsubcl.frx
FRMINKRBasan.frm
TXTEXPORT-NOTES.txt
BINResources
BINRT_ICON
BINID:7531
BINID:0
BINID:7532
BINID:0
BINID:7533
BINID:0
BINRT_GROUP_CURSOR4
BINID:0001
BINID:0
BINRT_VERSION
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| VB6 decompilation | VBReFormer 1.0.0+eed41cd404617014a6bab3b9a7b7e1fe6774591b: 7 project files (native). |
13 files
EXE8b62d1fae5707198c74c9bd3e27aa922
Structure
BINVB6
BIN[VB6 project]
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account