Suspect
VBScript
MD5: c59b4c37f8c20493a81fe923d7a640d8
Size: 4.6 MB
text/vbscript
This sample is a 4.4 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 2129e3554b629fae8bd7bc82117b379f5a93c46988ee25ee47d6463adac5c089
- MD5
- c59b4c37f8c20493a81fe923d7a640d8
- Verdict
- Inconclusive
- File type
- VBScript · 4.4 MB
Cite this report: https://app.malva.re/sha256/2129e3554b629fae8bd7bc82117b379f5a93c46988ee25ee47d6463adac5c089
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
4.6 MB · 4,599,912 B
First seen
2026-08-14 14:03 · 2 months ago
Last seen
2026-08-14 14:03 · 2 months ago
Last analysis
2026-08-14 14:46 · 2 months ago
Hashes
MD5
c59b4c37f8c20493a81fe923d7a640d8
Sha1
a6a665deeae73870e51cf4487af77936f5490897
Sha256
2129e3554b629fae8bd7bc82117b379f5a93c46988ee25ee47d6463adac5c089
Sha384
c1e2d429b9f6793c5f0fdf0f14768bc0160b176be2628c0b253dd11b5549f7ac4be4b4f96d854ea4d88f305ee469d80e
Sha512
02e64b485829d57f380611c268393a09a926c5eacab37195a58767e3c59704af3ca305b85ef200d5549489c1a9fe61721a12457d4eeacb722f79e3d95c3adde8
SSDeep
49152:uhXH9ktlxeRwpD9n+jtIQwvEPXHP5he6/u:uhtkTwRwpD9n+twsPXK
TLSH
9526281525C64227F4E705BEEB18B309DFADB4152FECF75FD15049BBAC220A2896027B
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLL
4 files
VBSc59b4c37f8c20493a81fe923d7a640d8
Structure
P7B[Authenticode]_3205fb45.p7b
BINOverlay_eb59f7d1.bin
BINResources
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | Authenticode present at 0x461000 size 7272 bytes |
| Info | Overlay extracted: Overlay_eb59f7d1.bin (1024 bytes) |