Suspect
dadcbd96fbc67634350408903490193d
VB5/6 Executable
MD5: dadcbd96fbc67634350408903490193d
Size: 28.67 KB
application/x-dosexec
This sample is a 28 KB VB5/6 Executable for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 9 embedded or derived files. It matches 3 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 6d8bbe9c45a9380f0312740bd154bbdb88aca4183ab6aa7e15eb2b652f33c8e6
- MD5
- dadcbd96fbc67634350408903490193d
- Verdict
- Inconclusive
- File type
- VB5/6 Executable · 28 KB
Cite this report: https://app.malva.re/sha256/6d8bbe9c45a9380f0312740bd154bbdb88aca4183ab6aa7e15eb2b652f33c8e6
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
28.67 KB · 28,672 B
First seen
2026-06-27 13:01 · 4 months ago
Last seen
2026-06-27 13:01 · 4 months ago
Last analysis
2026-10-26 02:30 · 2 days ago
Hashes
MD5
dadcbd96fbc67634350408903490193d
Sha1
0f797f3d5ce9bb0a6fd0b8208ab17a97ba165de1
Sha256
6d8bbe9c45a9380f0312740bd154bbdb88aca4183ab6aa7e15eb2b652f33c8e6
Sha384
371b02b06f6d524ebf695a7cc9e493f18f998d541f1887050738e885d8a36e20d3e69d742c0244762ab40851fe0bad9a
Sha512
c97a987b98c0407f62e84f23ef62b232cabd13f48488803be19462d60969b18456b28169902c374ab5cafb9547dc83e9809a944997fb9867671bc6c977ee87fa
SSDeep
192:5JBA+sfQwz0pD7NsHnQeh5dFV97Bh3LehID9T/A6QZsFDBKW3:5jA+HZD7NmdbNZ9T/QqDL3
TLSH
31D2C515B2CBD17BE29846B11E22D7EC2105BE106FC2CA5F71ECB75EBF7A1008560B1A
Detection
PeID
Microsoft Visual Basic v6.0 DLL
10 files
EXEdadcbd96fbc67634350408903490193d
Structure
BINVB6
BINDecompilation
BIN[VB6 project]
TXTAlsothis.vbp
CLSWom.cls
CLSClass1.cls
FRMForm1.frm
TXTEXPORT-NOTES.txt
BINResources
BINTYPELIB
BINID:0001
BINID:0
BIN_IID_CLASS1
BINID:0001
BINID:0
BIN_IID_WOM
BINID:0001
BINID:0
BINRT_VERSION
BINID:0001
BINID:3082
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| VB6 decompilation | VBReFormer 1.0.0+eed41cd404617014a6bab3b9a7b7e1fe6774591b: 5 project files (native). |
10 files
EXEdadcbd96fbc67634350408903490193d
Structure
BINVB6
BIN[VB6 project]
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account