Overview

overview

7

Static

static

3

ffdec_21.0...up.exe

windows7-x64

7

ffdec_21.0...up.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ffdec_21.0.0_setup.exe

  • Size

    13.4MB

  • MD5

    e77da43c08f5b9cf66a5f366a16fbabf

  • SHA1

    0287ae2fa24e7d92ea640e77b847aa5689124cc2

  • SHA256

    69b197074f6c7a42189fb033624d731f340e053279d980a543e7c39da007ac85

  • SHA512

    4c6aa4e2d3536b5b4396ba835d75f9541a79af487a85aeda99b537b7652ed125349e1d9099442bb3794c5b4b266d7f413d3f04bc61cebbbc64909723ce9a2740

  • SSDEEP

    393216:gUMAOJwKatN91j5zX4LjYj+nNAcrwq6uL:sZJw5fjpILjYjUrwvM

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • ffdec_21.0.0_setup.exe
    .exe windows:4 windows x86 arch:x86

    f4d1e4cd7416ef83f79f7c6a038875b3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    83778c6090bee55a4824200e5e2486ab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    c20327fced07b6e73d2262fc88b11552


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    b844086d4b3e59aa7b4439d88bcb40cb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    c442f1649aa0670a32c622fadfcd00bd


    Headers

    Imports

    Exports

    Sections

  • ffdec.bat
    .bat .vbs
  • ffdec.exe
    .exe windows:4 windows x86 arch:x86

    a6dfb1f34bd9658993ef7e370126d2dd


    Headers

    Imports

    Sections

  • ffdec.jar
    .jar
  • flashlib/airglobal.swc
    .zip
  • catalog.xml
    .xml
  • library.swf
  • flashlib/playerglobal32_0.swc
    .zip
  • catalog.xml
    .xml
  • library.swf
  • icon.ico
  • lib/JavactiveX.jar
    .jar
  • lib/LZMA.jar
    .jar
  • lib/avi.jar
    .jar
  • lib/avi.montemedia.license.txt
  • lib/cmykjpeg.jar
    .jar
  • lib/ddsreader.jar
    .jar
  • lib/ffdec_lib.jar
    .jar
  • lib/ffdec_lib.license.txt
  • lib/flamingo-6.2.jar
    .jar
  • lib/flamingo.license.txt
  • lib/flashdebugger.jar
    .jar
  • lib/gif.jar
    .jar
  • lib/gif.license.txt
  • lib/gifreader.jar
    .jar
  • lib/gifreader.license.txt
  • lib/gnujpdf.jar
    .jar
  • lib/jansi-2.4.0.jar
    .jar
  • lib/jargs.jar
    .jar
  • lib/jlayer-1.0.2.jar
    .jar
  • lib/jlayer.license.txt
  • lib/jna-3.5.1.jar
    .jar
  • lib/jna-platform-3.5.1.jar
    .jar
  • lib/jna.license.txt
  • lib/jpacker.jar
    .jar .js polyglot
  • lib/jpacker.license.txt
  • lib/jsyntaxpane-0.9.5.jar
    .jar
  • lib/jsyntaxpane.license.txt
  • lib/minimal-json-0.9.5.jar
    .jar
  • lib/minimal-json.license.txt
  • lib/miterstroke.jar
    .jar
  • lib/miterstroke.license.txt
  • lib/nellymoser.jar
    .jar
  • lib/nellymoser.license.txt
  • lib/sfntly.jar
    .jar
  • lib/sfntly.license.txt
  • lib/substance-6.2.jar
    .jar
  • lib/substance-flamingo-6.2.jar
    .jar
  • lib/substance-flamingo.license.txt
  • lib/substance.license.txt
  • lib/tablelayout.jar
    .jar
  • lib/tga.jar
    .jar
  • lib/tga.license.txt
  • lib/treetable.jar
    .jar
  • lib/trident-6.2.jar
    .jar
  • lib/trident.license.txt
  • lib/ttf.doubletype.license.txt
  • lib/ttf.fontastic.license.txt
  • lib/ttf.jar
    .jar
  • lib/vlcj-4.7.3.jar
    .jar
  • lib/vlcj-natives-4.7.0.jar
    .jar
  • license.txt
  • translator.bat
  • translator.exe
    .exe windows:4 windows x86 arch:x86

    c6e51dda1622035b42b177c9afe67c30


    Headers

    Imports

    Sections