Suspect
f8785964d0d888a9b8d2f600e313f7fa
VBScript
MD5: f8785964d0d888a9b8d2f600e313f7fa
Size: 15.73 MB
text/vbscript
This sample is a 15 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 15 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- d021b27e24a96b5c8c16ae89020188e79bc18414fef4b2fd15b88e30482fe58d
- MD5
- f8785964d0d888a9b8d2f600e313f7fa
- Verdict
- Inconclusive
- File type
- VBScript · 15 MB
Cite this report: https://app.malva.re/sha256/d021b27e24a96b5c8c16ae89020188e79bc18414fef4b2fd15b88e30482fe58d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
15.73 MB · 15,730,032 B
First seen
2026-10-30 12:00 · 2 days ago
Last seen
2026-10-30 12:00 · 2 days ago
Last analysis
2026-10-30 12:00 · 2 days ago
Hashes
MD5
f8785964d0d888a9b8d2f600e313f7fa
Sha1
1b8bd4ced3163d9ad94d8c5f7d178b06b9a8a5c5
Sha256
d021b27e24a96b5c8c16ae89020188e79bc18414fef4b2fd15b88e30482fe58d
Sha384
2418327638d69940bda79324431b39030dc92eb428eb62e951b68a8ba084b94095dc8ae004d098b57dfceebe78d2aa49
Sha512
532d1b295decb688a6d7cf5aaf851b65e86c2feec7559b02cf8635de1bd0d035ebf721a41eb3e6d2f233fd25c56767bfe57867839a20e1c3ec301a25f8b48c11
SSDeep
196608:s0Gqi5/EFVcfBkAOA6lteo5u/9QxbQZgoZGW6ZLdR9yMO9I6LSm9iE6YMz88L/:1qEVCBkAOAate8gP6ZLAI6LtiE6Ys/
TLSH
A4F633036AB144F9FAFBC23B49723E06B672B0E51725AEAF031065965F53381B97E701
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
16 files
VBSf8785964d0d888a9b8d2f600e313f7fa
Structure
P7B[Authenticode]_9f9e73a0.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINRT_STRING
BINID:0FFB
BINID:0
BINID:0FFC
BINID:0
BINID:0FFD
BINID:0
BINID:0FFE
BINID:0
BINID:0FFF
BINID:0
BINID:1000
BINID:0
BINRT_RCDATA
BINID:000C
BINID:0
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | Authenticode present at 0xEFF138 size 5176 bytes |
| Info | PDB Path: t$di |
16 files
VBSf8785964d0d888a9b8d2f600e313f7fa
Structure
P7B[Authenticode]_9f9e73a0.p7b
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account