General

  • Target

    TypeDuck-Windows-1.1.1-installer.exe

  • Size

    6.5MB

  • MD5

    d7f606815ecf8448a6458619a97441e4

  • SHA1

    9ecd5976ba6cd8a795d1d05260700d50a3a821ad

  • SHA256

    ee321479d2cb6af6df031ebf8efad9ae912919d736ea7144155ac3200d323722

  • SHA512

    c8a315a2d86f009983a1010fa9885396cc0c5c6b34f5a8abb84ab004e16eca98e605c71178af04801600b9b5198c7e0cda1b91d32aadce932e2a209fe506137f

  • SSDEEP

    98304:Anp1b8XIPQNDVP/op7fWJZQUwMffE2kX9NYPowbITgrwFM8wF+kjtBvtc4PmxXX:AnwXIPQkjWJCEfE2e9MITgka8DkjtBvq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 19 IoCs

    Checks for missing Authenticode signature.

Files

  • TypeDuck-Windows-1.1.1-installer.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • LICENSE.txt
  • TypeDuckDeployer.exe
    .exe windows:6 windows x86 arch:x86

    d9192f6348d6e942a8dfe8ac5647c4fb


    Headers

    Imports

    Exports

    Sections

  • TypeDuckServer.exe
    .exe windows:6 windows x86 arch:x86

    f7d1ec3a8b4ca85ba5d0dc753feba69c


    Headers

    Imports

    Exports

    Sections

  • TypeDuckSetup.exe
    .exe windows:6 windows x86 arch:x86

    40b152bb2babcc6aeecb95f112a6dfdd


    Headers

    Imports

    Sections

  • WinSparkle.dll
    .dll windows:5 windows x86 arch:x86

    072f355c98f62d07b2dd5dd555f1c882


    Headers

    Imports

    Exports

    Sections

  • data/cangjie3.dict.yaml
  • data/cangjie3.schema.yaml
  • data/cangjie5.dict.yaml
  • data/cangjie5.schema.yaml
  • data/common.yaml
  • data/default.yaml
  • data/include.yaml
  • data/jyut6ping3.dict.yaml
  • data/jyut6ping3.schema.yaml
  • data/jyut6ping3_scolar.dict.yaml
  • data/jyut6ping3_scolar.schema.yaml
  • data/loengfan.dict.yaml
  • data/loengfan.schema.yaml
  • data/luna_pinyin.dict.yaml
  • data/luna_pinyin.schema.yaml
  • data/opencc/HKVariantsRev.ocd2
  • data/opencc/HKVariantsRevPhrases.ocd2
  • data/opencc/TSCharacters.ocd2
  • data/opencc/TSPhrases.ocd2
  • data/opencc/hk2s.json
  • data/template.yaml
  • data/weasel.yaml
  • rime.dll
    .dll windows:6 windows x86 arch:x86

    bc27351834a6ccc35d9169bdfe8b9c95


    Headers

    Imports

    Exports

    Sections

  • typeduck.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    14064dcc89aeca90cf222715afb74eaa


    Headers

    Imports

    Exports

    Sections

  • typeduck.ime
    .dll windows:6 windows x86 arch:x86

    5347bc9d26d4494e5c7d325d648d6ee5


    Headers

    Imports

    Exports

    Sections

  • typeduckt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    14064dcc89aeca90cf222715afb74eaa


    Headers

    Imports

    Exports

    Sections

  • typeduckt.ime
    .dll windows:6 windows x86 arch:x86

    5347bc9d26d4494e5c7d325d648d6ee5


    Headers

    Imports

    Exports

    Sections

  • typeducktx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    a3bff2b0045b8c3429ffae9a8c1d5a3d


    Headers

    Imports

    Exports

    Sections

  • typeducktx64.ime
    .dll windows:6 windows x64 arch:x64

    7447c3c2b70b59b1768576bac4eb3cab


    Headers

    Imports

    Exports

    Sections

  • typeduckx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    a3bff2b0045b8c3429ffae9a8c1d5a3d


    Headers

    Imports

    Exports

    Sections

  • typeduckx64.ime
    .dll windows:6 windows x64 arch:x64

    7447c3c2b70b59b1768576bac4eb3cab


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections