mandiant-capa-rules/compiler/vb/compiled-from-visual-basic.yml

rule:
  meta:
    name: compiled from Visual Basic
    namespace: compiler/vb
    authors:
      - "@williballenthin"
    scope: file
    examples:
      - 9bca6b99e7981208af4c7925b96fb9cf
  features:
    - and:
      - string: /VB5!.*/
      - import: msvbvm60.ThunRTMain