Static

static

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ffdec_18.4.1_setup.exe

  • Size

    12.7MB

  • MD5

    ce894be27441d5063f04009a44a740d9

  • SHA1

    18c76daee485f0d2255f32f5b89be517523f6992

  • SHA256

    0ce556445da07e36f65e0979f145c5b187fd28ba9f674428c3e6976dfd5feafe

  • SHA512

    2c92e3ff51a3b09532fedef4360301eaad4d0d73b0f5edc331291f1e78fbb41e3bfac2df3af57311922c70c7b68bcdb7384d2b4d4af8df13963efdbfd44dbc60

  • SSDEEP

    393216:COHdAt62K0coN+y+nUwWT0GlKqf9bPtPs7l:POtnK0cokIpw2+h

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • ffdec_18.4.1_setup.exe
    .exe windows:4 windows x86 arch:x86

    96ab939b3b55d317ed1968d099ccc72c


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    83778c6090bee55a4824200e5e2486ab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    c20327fced07b6e73d2262fc88b11552


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    b844086d4b3e59aa7b4439d88bcb40cb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    c442f1649aa0670a32c622fadfcd00bd


    Headers

    Imports

    Exports

    Sections

  • ffdec.bat
    .bat .vbs
  • ffdec.exe
    .exe windows:4 windows x86 arch:x86

    a6dfb1f34bd9658993ef7e370126d2dd


    Headers

    Imports

    Sections

  • ffdec.jar
    .jar
  • flashlib/airglobal.swc
    .zip
  • catalog.xml
    .xml
  • library.swf
  • flashlib/playerglobal32_0.swc
    .zip
  • catalog.xml
    .xml
  • library.swf
  • icon.ico
  • lib/JavactiveX.jar
    .jar
  • lib/LZMA.jar
    .jar
  • lib/avi.jar
    .jar
  • lib/avi.montemedia.license.txt
  • lib/cmykjpeg.jar
    .jar
  • lib/ddsreader.jar
    .jar
  • lib/ffdec_lib.jar
    .jar
  • lib/ffdec_lib.license.txt
  • lib/flamingo-6.2.jar
    .jar
  • lib/flamingo.license.txt
  • lib/flashdebugger.jar
    .jar
  • lib/gif.jar
    .jar
  • lib/gif.license.txt
  • lib/gnujpdf.jar
    .jar
  • lib/jargs.jar
    .jar
  • lib/jlayer-1.0.2.jar
    .jar
  • lib/jlayer.license.txt
  • lib/jna-3.5.1.jar
    .jar
  • lib/jna-platform-3.5.1.jar
    .jar
  • lib/jna.license.txt
  • lib/jpacker.jar
    .jar .js polyglot
  • lib/jpacker.license.txt
  • lib/jpproxy.jar
    .jar
  • lib/jpproxy.muffin.license.txt
  • lib/jsyntaxpane-0.9.5.jar
    .jar
  • lib/jsyntaxpane.license.txt
  • lib/minimal-json-0.9.5.jar
    .jar
  • lib/minimal-json.license.txt
  • lib/nellymoser.jar
    .jar
  • lib/nellymoser.license.txt
  • lib/sfntly.jar
    .jar
  • lib/sfntly.license.txt
  • lib/substance-6.2.jar
    .jar
  • lib/substance-flamingo-6.2.jar
    .jar
  • lib/substance-flamingo.license.txt
  • lib/substance.license.txt
  • lib/tablelayout.jar
    .jar
  • lib/tga.jar
    .jar
  • lib/tga.license.txt
  • lib/treetable.jar
    .jar
  • lib/trident-6.2.jar
    .jar
  • lib/trident.license.txt
  • lib/ttf.doubletype.license.txt
  • lib/ttf.fontastic.license.txt
  • lib/ttf.jar
    .jar
  • lib/vlcj-4.7.3.jar
    .jar
  • lib/vlcj-natives-4.7.0.jar
    .jar
  • license.txt
  • translator.bat
  • translator.exe
    .exe windows:4 windows x86 arch:x86

    c6e51dda1622035b42b177c9afe67c30


    Headers

    Imports

    Sections