Articles

Stay informed with expert posts covering malware analysis techniques, threat intelligence and Malva.RE features.

DarkCloud 4.9 Decompiled with VBReFormer Gen 2 (7.x)
DarkCloud 4.9 Decompiled with VBReFormer Gen 2 (7.x)

A reverse engineer's reading of DarkCloud 4.9: understanding the VB6 runtime, following the data collection and telling active transports apart thanks to the code reconstructed with VBReFormer Gen 2 (7.x).

Malware Research

Malware Research

25 min read
Malva.RE Decompiles VB5/VB6 with VBReFormer Gen 2
Malva.RE Decompiles VB5/VB6 with VBReFormer Gen 2

What support for Visual Basic 5/6 executables changes in a Malva.RE report: sources reconstructed with VBReFormer Gen 2 (7.x), browsable procedure by procedure, and, for DarkCloud, an exfiltration configuration read in the code rather than guessed from strings. The DarkCloud 4.9 case serves as the example.

Malware Research

Malware Research

6 min read
Static UPX Unpacking: Rebuilding the Original PE Without Running It
Static UPX Unpacking: Rebuilding the Original PE Without Running It

A technical walkthrough of the UPX format and of how Malva.RE detects, decompresses and rebuilds UPX-packed PE files (NRV2B/D/E, LZMA, call/jump filters, imports, relocations, resources) without execution, emulation or sandbox, so the real payload reaches YARA, configuration extractors and family detection.

Malware Research Team

Malware Research Team

22 min read
Malva.RE now powers MalwareBazaar with deep static reports
Malva.RE now powers MalwareBazaar with deep static reports

As of August 2025, Malva.RE provides deep static reports directly integrated into MalwareBazaar. This partnership highlights the resilience of our lightweight, execution-free malware analysis engine.

Malware Research Team

Malware Research Team

2 min read
Advanced AutoIt Executable Decompilation with Malva.RE
Advanced AutoIt Executable Decompilation with Malva.RE

Malva.RE now supports AutoIt executable detection and decompilation, providing deep insights into complex malware attack chains with no execution risk.

Malva.RE Team

Malva.RE Team

3 min read
Understanding VBA Stomping and Purging: Why High-Fidelity Decompilation is Critical
Understanding VBA Stomping and Purging: Why High-Fidelity Decompilation is Critical

Learn about the advanced techniques of VBA Stomping and VBA Purging, and discover how Malva.RE, powered by vbaDNA technology, offers the most effective solution for detecting and analyzing these sophisticated threats hidden within Microsoft Office macros.

Malva.RE Team

Malva.RE Team

5 min read
Malware Configuration Extraction
Malware Configuration Extraction

Extract configurations like C2 servers, encryption keys, and more from various malware families with Malva.RE’s unique static analysis approach.

Malva.RE Team

Malva.RE Team

5 min read
Fast Dissection & Structural Analysis
Fast Dissection & Structural Analysis

Discover how Malva.RE analyzes multi-level malware efficiently through fast structural dissection, with no execution, designed for SOC, CERT and malware research teams.

Malva.RE Team

Malva.RE Team

4 min read
Navigating the Complexity of Multi-Level Malware
Navigating the Complexity of Multi-Level Malware

Explore the sophisticated world of multi-level malware and discover how Yneos' Malva.RE provides an innovative, AI-enhanced solution for detecting and analyzing complex threats hidden in various file formats. Understand the importance of advanced static analysis in the modern cybersecurity landscape.

Malva.RE Team

Malva.RE Team

3 min read
Revolutionizing Malware Analysis with Cutting-Edge Static Analysis Technology
Revolutionizing Malware Analysis with Cutting-Edge Static Analysis Technology

Discover Malva.RE, Yneos' groundbreaking malware analysis platform, blending state-of-the-art static analysis with AI for unparalleled efficiency and precision in detecting and analyzing cybersecurity threats.

Malva.RE Team

Malva.RE Team

2 min read
// Built in Savoie

Designed and built in Savoie by Yneos

Malva.RE is published by Yneos, a French cybersecurity and secure software development company based at Savoie Technolac (Le Bourget-du-Lac, France).

Discover Yneos →

// Malva.RE

Try Malva.RE on a real malware sample

Understand malware structure and behavior without execution

Try for free

Free plan: public reports

Request a demo →