Decompilation

Decompilation - Explore our articles.

Malva.RE Decompiles VB5/VB6 with VBReFormer Gen 2
Malva.RE Decompiles VB5/VB6 with VBReFormer Gen 2

What support for Visual Basic 5/6 executables changes in a Malva.RE report: sources reconstructed with VBReFormer Gen 2 (7.x), browsable procedure by procedure, and, for DarkCloud, an exfiltration configuration read in the code rather than guessed from strings. The DarkCloud 4.9 case serves as the example.

Malware Research

Malware Research

6 min read
Advanced AutoIt Executable Decompilation with Malva.RE
Advanced AutoIt Executable Decompilation with Malva.RE

Malva.RE now supports AutoIt executable detection and decompilation, providing deep insights into complex malware attack chains with no execution risk.

Malva.RE Team

Malva.RE Team

3 min read
// Built in Savoie

Designed and built in Savoie by Yneos

Malva.RE is published by Yneos, a French cybersecurity and secure software development company based at Savoie Technolac (Le Bourget-du-Lac, France).

Discover Yneos →

// Malva.RE

Try Malva.RE on a real malware sample

Understand malware structure and behavior without execution

Try for free

Free plan: public reports

Request a demo →