General

  • Target

    176f47092f4f310b89b29fae8b49bb1261f89c499060ef84cf114d57a5bebf5a

  • Size

    8.3MB

  • MD5

    a2faa631a8c1b1efbde203f1bdc89bbe

  • SHA1

    444428523c7a2af502e9a3296509bfc41a56b809

  • SHA256

    176f47092f4f310b89b29fae8b49bb1261f89c499060ef84cf114d57a5bebf5a

  • SHA512

    b0eb9675c990c0951323b31319d2888e18ffc32f3c6e597ec6a0c5f47d21e1f719d5f2e02a197b99a061c35002d9276bfa6445cc57456768e6323fa8ba4e936b

  • SSDEEP

    196608:KCDhVSTrzlbxvU6kpS4KrwFNTsa+j/8NxghlmiY6r/7Q6aRwtGjei+mGwi:KoS311XkpSANTfo/miprM6agGv+h

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • 176f47092f4f310b89b29fae8b49bb1261f89c499060ef84cf114d57a5bebf5a
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    c2674610547987e150ca76c2c9c784a0


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x86 arch:x86

    c45565dca63bd3adb32b0e776aec1183


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x86 arch:x86

    1228855ac62a97a502e252ba4e19c483


    Headers

    Imports

    Exports

    Sections

  • WeaselSetup.exe
    .exe windows:6 windows x86 arch:x86

    ca55a27ffcaee833c6f008355ceef278


    Headers

    Imports

    Sections

  • WinSparkle.dll
    .dll windows:5 windows x86 arch:x86

    072f355c98f62d07b2dd5dd555f1c882


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:4 windows x86 arch:x86

    5bb7453a258f256fc2d10b359178004c


    Code Sign

    Headers

    Imports

    Sections

  • data/bopomofo.schema.yaml
  • data/bopomofo_express.schema.yaml
  • data/bopomofo_tw.schema.yaml
  • data/cangjie5.dict.yaml
  • data/cangjie5.schema.yaml
  • data/cangjie5_express.schema.yaml
  • data/default.yaml
  • data/essay.txt
  • data/key_bindings.yaml
  • data/luna_pinyin.dict.yaml
  • data/luna_pinyin.schema.yaml
  • data/luna_pinyin_fluency.schema.yaml
  • data/luna_pinyin_simp.schema.yaml
  • data/luna_pinyin_tw.schema.yaml
  • data/luna_quanpin.schema.yaml
  • data/opencc/HKVariants.ocd2
  • data/opencc/HKVariantsRev.ocd2
  • data/opencc/HKVariantsRevPhrases.ocd2
  • data/opencc/JPShinjitaiCharacters.ocd2
  • data/opencc/JPShinjitaiPhrases.ocd2
  • data/opencc/JPVariants.ocd2
  • data/opencc/JPVariantsRev.ocd2
  • data/opencc/STCharacters.ocd2
  • data/opencc/STPhrases.ocd2
  • data/opencc/TSCharacters.ocd2
  • data/opencc/TSPhrases.ocd2
  • data/opencc/TWPhrases.ocd2
  • data/opencc/TWPhrasesRev.ocd2
  • data/opencc/TWVariants.ocd2
  • data/opencc/TWVariantsRev.ocd2
  • data/opencc/TWVariantsRevPhrases.ocd2
  • data/opencc/hk2s.json
  • data/opencc/hk2t.json
  • data/opencc/jp2t.json
  • data/opencc/s2hk.json
  • data/opencc/s2t.json
  • data/opencc/s2tw.json
  • data/opencc/s2twp.json
  • data/opencc/t2hk.json
  • data/opencc/t2jp.json
  • data/opencc/t2s.json
  • data/opencc/t2tw.json
  • data/opencc/tw2s.json
  • data/opencc/tw2sp.json
  • data/opencc/tw2t.json
  • data/pinyin.yaml
  • data/preview/color_scheme_android.png
    .png
  • data/preview/color_scheme_aqua.png
    .png
  • data/preview/color_scheme_azure.png
    .png
  • data/preview/color_scheme_brasil.png
    .png
  • data/preview/color_scheme_brisk.png
    .png
  • data/preview/color_scheme_cool_breeze.png
    .png
  • data/preview/color_scheme_dark_temple.png
    .png
  • data/preview/color_scheme_doraemon.png
    .png
  • data/preview/color_scheme_dota_2.png
    .png
  • data/preview/color_scheme_espagna.png
    .png
  • data/preview/color_scheme_flypy.png
    .png
  • data/preview/color_scheme_gholabok.png
    .png
  • data/preview/color_scheme_google.png
    .png
  • data/preview/color_scheme_google_plus.png
    .png
  • data/preview/color_scheme_ink.png
    .png
  • data/preview/color_scheme_kuma_shuzboz.png
    .png
  • data/preview/color_scheme_kuon.png
    .png
  • data/preview/color_scheme_lost_temple.png
    .png
  • data/preview/color_scheme_luna.png
    .png
  • data/preview/color_scheme_macau.png
    .png
  • data/preview/color_scheme_metroblue.png
    .png
  • data/preview/color_scheme_modern_warfare.png
    .png
  • data/preview/color_scheme_nba.png
    .png
  • data/preview/color_scheme_ps4.png
    .png
  • data/preview/color_scheme_psionics.png
    .png
  • data/preview/color_scheme_skype.png
    .png
  • data/preview/color_scheme_smurfs.png
    .png
  • data/preview/color_scheme_so_young.png
    .png
  • data/preview/color_scheme_solarized_rock.png
    .png
  • data/preview/color_scheme_starcraft.png
    .png
  • data/preview/color_scheme_starcraft_ii.png
    .png
  • data/preview/color_scheme_steam.png
    .png
  • data/preview/color_scheme_tintin.png
    .png
  • data/preview/color_scheme_wii.png
    .png
  • data/preview/color_scheme_xbox_silver.png
    .png
  • data/preview/color_scheme_youtube.png
    .png
  • data/punctuation.yaml
  • data/stroke.dict.yaml
  • data/stroke.schema.yaml
  • data/symbols.yaml
  • data/terra_pinyin.dict.yaml
  • data/terra_pinyin.schema.yaml
  • data/weasel.yaml
  • data/zhuyin.yaml
  • rime-install-config.bat
    .bat .vbs
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x86 arch:x86

    87e556a974b5cb6605a037d9b7e8d652


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    cc6eb76525f4089f4d39fba6ab7d7a04


    Headers

    Imports

    Exports

    Sections

  • weasel.ime
    .dll windows:6 windows x86 arch:x86

    f3913f8dd9b1f8b011bd5d898fb41071


    Headers

    Imports

    Exports

    Sections

  • weaselt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    cc6eb76525f4089f4d39fba6ab7d7a04


    Headers

    Imports

    Exports

    Sections

  • weaselt.ime
    .dll windows:6 windows x86 arch:x86

    f3913f8dd9b1f8b011bd5d898fb41071


    Headers

    Imports

    Exports

    Sections

  • weaseltx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    d579680b5f01cb8bbd37f36294347256


    Headers

    Imports

    Exports

    Sections

  • weaseltx64.ime
    .dll windows:6 windows x64 arch:x64

    7e4a329c935b5ed491e212a994c1388f


    Headers

    Imports

    Exports

    Sections

  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    d579680b5f01cb8bbd37f36294347256


    Headers

    Imports

    Exports

    Sections

  • weaselx64.ime
    .dll windows:6 windows x64 arch:x64

    7e4a329c935b5ed491e212a994c1388f


    Headers

    Imports

    Exports

    Sections