We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [visual-basic]

an event-driven programming language and IDE from Microsoft for its COM programming model. The precursor to VB.NET.

Filter by
Sorted by
Tagged with
0
votes
0answers
90 views

Turning p-code generated by VBA (Visual Basic for Applications) back into VBA

According to the README in https://github.com/bontchev/pcodedmp : "As each VBA line is entered into the VBA editor, it is immediately compiled into p-code" "when you open the source of a macro ...
1
vote
0answers
83 views

How can I extract resource images from Visual Basic 6 Malware

I am reverse engineering some malware that is written in VB6. I found this tool which tried to decompile the .exe, but I noticed that the image that is being loaded by the .exe is suspicious and I ...
0
votes
1answer
102 views

What methods exist for adding new windows form controls into compiled assembly using dnSpy?

I am trying to add another button into windows form using dnSpy. Is it possible to add another? I want the end result be like this one. Any help will be highly appreciated.Thanks
1
vote
2answers
73 views

How can a Javascript file drop .exe written in Visual Basic without network communication?

I am analyzing a malicious JS file, which is obfuscated in a way that I could not de-obfuscate. When I executed it in a virtual machine and spectated process changes, I noticed that a new executable ...
2
votes
2answers
286 views

How can I identify how this string is being encoded so I can replicate it?

A friends company uses an old VB6 application to generate encoded strings to then use in their also old and out of date database system. They have the application running in standalone mode so I can ...
1
vote
2answers
2k views

Reverse Engineering visual basics programs

I am a beginner and I am doing a few crackme stuff, I'm pretty okay when it comes to system calls such as user32. But there is one crackme which uses msvbvm50.dll (Visual Basic) and it has weird ...
8
votes
1answer
415 views

Visual Basic internal structure

I am analyzing some Visual Basic 6.0 malware(before .NET) and I have several questions regarding the internal structure of the format. The samples I have are both p-code or native code compiled(...
0
votes
1answer
1k views

Decompiling/Unpacking a Compiled/Packed File (Or Somehow Inserting a Flag)

I'm using a program that can pack/compile a folder with files into a single *.xyz file that only that program can decompile and read. In order for the program to create a compiled file the flag: [...
1
vote
1answer
1k views

Decompiling a windows 3.1, VisualBasic 3 exe. Do I need to decompile dll too? How?

New to decompiling, and code generally. Trying to decompile a windows 3.1 game (text adventure), so I can build it up again. Because at the moment it doesn't work (even on windows 3.1). I decompiled ...
2
votes
0answers
120 views

Identity of a programmer from a reversed VB.NET application (Visual Studio)

I have reversed a program I found running on my computer, written in VB.NET using Microsoft Visual Studio. I'm pretty sure it is a keylogger. Now since I'm a very careful user, I'm 100% sure I did ...
2
votes
3answers
1k views

About the VB P-CODE mode reverse-engineer

I have to reverse-engineer a VB P-CODE mode program. I had the program's P-CODE, but I don't know what it means. For example: Proc: 421840 421100: 04 FLdRfVar local_0098 421103: 04 ...
0
votes
2answers
706 views

large exe in ollydbg

I am trying to debug an executable(PEID shows Visual Basic 5.0 - 6.0) using ollydbg v1.10. The exe is quiet big about 74 mb and olly is always crashing during the analysis process. I am on windows 7, ...
2
votes
1answer
4k views

Unpacking a program which seems to be not packed?

I have downloaded a sample of a malware to analyze it. First, I opened it with PEiD to look if it is packed. PEiD gives me the following information: Microsoft Visual Basic 5.0/6.0 So, I assumed ...
0
votes
1answer
296 views

Where can i find Visual Basic Image Internal Structure Format by Alex Ionescu?

Where i can find a working link to this tutorial? I have searched a lot on the net but all links are broken. Could anyone upload it somewhere? Original link http://www.alex-ionescu.com/vb.pdf
1
vote
0answers
573 views

How to decrypt this file?

I have to decrypt a file that is used by an app built using VB5. The file itself contains some data that is decrypted when the app is run and the decrypted data is text data that is displayed in a ...
2
votes
1answer
1k views

Complications reverse engineering a Visual Basic application

I'm reverse engineering a Visual Basic application and I've run into a big of a sticky situation, so I was hoping that someone might have an opinion on a way to approach it. It's basically a crackme ...
3
votes
0answers
290 views

IDA Pro Symbian Debugger 'general OS related' Error [closed]

I am using remote symbian: c5-03 (Application TRK 3.2.7 for all S60 5.0 devices with production images). However, whenever I start the debugger, I get this error: general OS-related error What went ...
12
votes
3answers
26k views

Reverse engineering a Visual Basic p-code binary

p-code is the intermediate code that was used in Visual Basic (before .NET). I would like to know where I can find resources/tools related to analysis of these virtual machine codes.