General

  • Target

    ffdec_21.0.5_setup.exe

  • Size

    13.5MB

  • MD5

    a79bd1d5e8a82111c3819ff42d7ea32f

  • SHA1

    8432eb8fbeebed423e3b42b086291b42c2e54c6b

  • SHA256

    477b0286ea489f872a3f3f3b01cef1829098da69e7e386d4a41ecbe51542db32

  • SHA512

    0f1077e6c60c8af490033ff8700cdb9318d45505fa6adbe8abc325db58ff9ed215fd25d0189b7fb38f32f490b50f333d20956b6269e1f55699c02c27008c9a94

  • SSDEEP

    393216:oO/v8b0Ygk8WjI/yF/WNaqzY42dpmmDr8pc8XerWcYN:p/vPYci/WN6Rpm2yf4g

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • ffdec_21.0.5_setup.exe
    .exe windows:4 windows x86 arch:x86

    f4d1e4cd7416ef83f79f7c6a038875b3


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    83778c6090bee55a4824200e5e2486ab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    c20327fced07b6e73d2262fc88b11552


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    b844086d4b3e59aa7b4439d88bcb40cb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    c442f1649aa0670a32c622fadfcd00bd


    Headers

    Imports

    Exports

    Sections

  • ffdec.bat
    .bat .vbs
  • ffdec.exe
    .exe windows:4 windows x86 arch:x86

    a6dfb1f34bd9658993ef7e370126d2dd


    Headers

    Imports

    Sections

  • ffdec.jar
    .jar
  • flashlib/airglobal.swc
    .zip
  • catalog.xml
    .xml
  • library.swf
  • flashlib/playerglobal32_0.swc
    .zip
  • catalog.xml
    .xml
  • library.swf
  • icon.ico
  • lib/JavactiveX.jar
    .jar
  • lib/LZMA.jar
    .jar
  • lib/avi.jar
    .jar
  • lib/avi.montemedia.license.txt
  • lib/cmykjpeg.jar
    .jar
  • lib/ddsreader.jar
    .jar
  • lib/decimal.jar
    .jar
  • lib/decimal.license.txt
  • lib/ffdec_lib.jar
    .jar
  • lib/ffdec_lib.license.txt
  • lib/flamingo-6.2.jar
    .jar
  • lib/flamingo.license.txt
  • lib/flashdebugger.jar
    .jar
  • lib/gif.jar
    .jar
  • lib/gif.license.txt
  • lib/gifreader.jar
    .jar
  • lib/gifreader.license.txt
  • lib/gnujpdf.jar
    .jar
  • lib/jansi-2.4.0.jar
    .jar
  • lib/jargs.jar
    .jar
  • lib/jlayer-1.0.2.jar
    .jar
  • lib/jlayer.license.txt
  • lib/jna-3.5.1.jar
    .jar
  • lib/jna-platform-3.5.1.jar
    .jar
  • lib/jna.license.txt
  • lib/jpacker.jar
    .jar .js polyglot
  • lib/jpacker.license.txt
  • lib/jsyntaxpane-0.9.5.jar
    .jar
  • lib/jsyntaxpane.license.txt
  • lib/minimal-json-0.9.5.jar
    .jar
  • lib/minimal-json.license.txt
  • lib/miterstroke.jar
    .jar
  • lib/miterstroke.license.txt
  • lib/nellymoser.jar
    .jar
  • lib/nellymoser.license.txt
  • lib/sfntly.jar
    .jar
  • lib/sfntly.license.txt
  • lib/substance-6.2.jar
    .jar
  • lib/substance-flamingo-6.2.jar
    .jar
  • lib/substance-flamingo.license.txt
  • lib/substance.license.txt
  • lib/tablelayout.jar
    .jar
  • lib/tga.jar
    .jar
  • lib/tga.license.txt
  • lib/treetable.jar
    .jar
  • lib/trident-6.2.jar
    .jar
  • lib/trident.license.txt
  • lib/ttf.doubletype.license.txt
  • lib/ttf.fontastic.license.txt
  • lib/ttf.jar
    .jar
  • lib/vlcj-4.7.3.jar
    .jar
  • lib/vlcj-natives-4.7.0.jar
    .jar
  • license.txt
  • translator.bat
  • translator.exe
    .exe windows:4 windows x86 arch:x86

    c6e51dda1622035b42b177c9afe67c30


    Headers

    Imports

    Sections