Overview

overview

7

Static

static

3

ffdec_21.0...up.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ffdec_21.0.4_setup.exe

  • Size

    13.6MB

  • MD5

    41cba26729609c11b7b5524a99fca418

  • SHA1

    9b4ddc4f8b9e677def1455190dde5ba0a6277ca5

  • SHA256

    7cd1bf40a2df5643205e9bb4d70a6ecea74036b0828cea1d5322dfc4df740db1

  • SHA512

    492dadcaefaa29fdf5369f6254ea36834b8fcf315ef6eed8c146492a3ee6672fe38d53df9abd8bd2a848f18ad3fc87c75cdaf6229e301c2ddcbb559032376ac7

  • SSDEEP

    393216:tCNKBi17HTZBZy1ZYakSA+QCUWeYZZxESU6mBj:MNKBQjNa1Z5XJ7zBREFH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • ffdec_21.0.4_setup.exe
    .exe windows:4 windows x86 arch:x86

    f4d1e4cd7416ef83f79f7c6a038875b3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    83778c6090bee55a4824200e5e2486ab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    c20327fced07b6e73d2262fc88b11552


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    b844086d4b3e59aa7b4439d88bcb40cb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    c442f1649aa0670a32c622fadfcd00bd


    Headers

    Imports

    Exports

    Sections

  • ffdec.bat
    .bat .vbs
  • ffdec.exe
    .exe windows:4 windows x86 arch:x86

    a6dfb1f34bd9658993ef7e370126d2dd


    Headers

    Imports

    Sections

  • ffdec.jar
    .jar
  • flashlib/airglobal.swc
    .zip
  • catalog.xml
    .xml
  • library.swf
  • flashlib/playerglobal32_0.swc
    .zip
  • catalog.xml
    .xml
  • library.swf
  • icon.ico
  • lib/JavactiveX.jar
    .jar
  • lib/LZMA.jar
    .jar
  • lib/avi.jar
    .jar
  • lib/avi.montemedia.license.txt
  • lib/cmykjpeg.jar
    .jar
  • lib/ddsreader.jar
    .jar
  • lib/decimal.jar
    .jar
  • lib/decimal.license.txt
  • lib/ffdec_lib.jar
    .jar
  • lib/ffdec_lib.license.txt
  • lib/flamingo-6.2.jar
    .jar
  • lib/flamingo.license.txt
  • lib/flashdebugger.jar
    .jar
  • lib/gif.jar
    .jar
  • lib/gif.license.txt
  • lib/gifreader.jar
    .jar
  • lib/gifreader.license.txt
  • lib/gnujpdf.jar
    .jar
  • lib/jansi-2.4.0.jar
    .jar
  • lib/jargs.jar
    .jar
  • lib/jlayer-1.0.2.jar
    .jar
  • lib/jlayer.license.txt
  • lib/jna-3.5.1.jar
    .jar
  • lib/jna-platform-3.5.1.jar
    .jar
  • lib/jna.license.txt
  • lib/jpacker.jar
    .jar .js polyglot
  • lib/jpacker.license.txt
  • lib/jsyntaxpane-0.9.5.jar
    .jar
  • lib/jsyntaxpane.license.txt
  • lib/minimal-json-0.9.5.jar
    .jar
  • lib/minimal-json.license.txt
  • lib/miterstroke.jar
    .jar
  • lib/miterstroke.license.txt
  • lib/nellymoser.jar
    .jar
  • lib/nellymoser.license.txt
  • lib/sfntly.jar
    .jar
  • lib/sfntly.license.txt
  • lib/substance-6.2.jar
    .jar
  • lib/substance-flamingo-6.2.jar
    .jar
  • lib/substance-flamingo.license.txt
  • lib/substance.license.txt
  • lib/tablelayout.jar
    .jar
  • lib/tga.jar
    .jar
  • lib/tga.license.txt
  • lib/treetable.jar
    .jar
  • lib/trident-6.2.jar
    .jar
  • lib/trident.license.txt
  • lib/ttf.doubletype.license.txt
  • lib/ttf.fontastic.license.txt
  • lib/ttf.jar
    .jar
  • lib/vlcj-4.7.3.jar
    .jar
  • lib/vlcj-natives-4.7.0.jar
    .jar
  • license.txt
  • translator.bat
  • translator.exe
    .exe windows:4 windows x86 arch:x86

    c6e51dda1622035b42b177c9afe67c30


    Headers

    Imports

    Sections