General

  • Target

    bed3477c0c0ca5cb1c7e56f1658446077fe019a55cf6d026fdb7f1d92d1da5be

  • Size

    8.9MB

  • MD5

    22c731bb305915ca379a7e77dc230ce4

  • SHA1

    678889373cdc05c37704f5dd59b662e5f6c8ebe3

  • SHA256

    bed3477c0c0ca5cb1c7e56f1658446077fe019a55cf6d026fdb7f1d92d1da5be

  • SHA512

    55c1e28b94da6959df4538267b8b1cc51fd3478595bd35dde73e0c9454062a7e6226a0b4d2c643f89cdd2ef6279f063562920a68fc3e600dfd7a79098d30de40

  • SSDEEP

    196608:Khd7/0c0/EMiCDIaCFeSJbezl2i1VKIg/A+zttPxkK0BQaSb:Khd7/uETCDIaCgSpsZjYzPxkKvLb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

Files

  • bed3477c0c0ca5cb1c7e56f1658446077fe019a55cf6d026fdb7f1d92d1da5be
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    c2674610547987e150ca76c2c9c784a0


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x86 arch:x86

    2a24fe5225576a67645ea6cb3505882d


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x86 arch:x86

    4dc749fa2a4d654ebcc7121a6ec7c58e


    Headers

    Imports

    Exports

    Sections

  • WeaselSetup.exe
    .exe windows:6 windows x86 arch:x86

    da1518ecc6042e7038d8bf4885519ba5


    Headers

    Imports

    Sections

  • WinSparkle.dll
    .dll windows:5 windows x86 arch:x86

    072f355c98f62d07b2dd5dd555f1c882


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:4 windows x86 arch:x86

    5bb7453a258f256fc2d10b359178004c


    Code Sign

    Headers

    Imports

    Sections

  • data/bopomofo.schema.yaml
  • data/bopomofo_express.schema.yaml
  • data/bopomofo_tw.schema.yaml
  • data/cangjie5.dict.yaml
  • data/cangjie5.schema.yaml
  • data/cangjie5_express.schema.yaml
  • data/default.yaml
  • data/essay.txt
  • data/key_bindings.yaml
  • data/luna_pinyin.dict.yaml
  • data/luna_pinyin.schema.yaml
  • data/luna_pinyin_fluency.schema.yaml
  • data/luna_pinyin_simp.schema.yaml
  • data/luna_pinyin_tw.schema.yaml
  • data/luna_quanpin.schema.yaml
  • data/opencc/HKVariants.ocd2
  • data/opencc/HKVariantsRev.ocd2
  • data/opencc/HKVariantsRevPhrases.ocd2
  • data/opencc/JPShinjitaiCharacters.ocd2
  • data/opencc/JPShinjitaiPhrases.ocd2
  • data/opencc/JPVariants.ocd2
  • data/opencc/JPVariantsRev.ocd2
  • data/opencc/STCharacters.ocd2
  • data/opencc/STPhrases.ocd2
  • data/opencc/TSCharacters.ocd2
  • data/opencc/TSPhrases.ocd2
  • data/opencc/TWPhrases.ocd2
  • data/opencc/TWPhrasesRev.ocd2
  • data/opencc/TWVariants.ocd2
  • data/opencc/TWVariantsRev.ocd2
  • data/opencc/TWVariantsRevPhrases.ocd2
  • data/opencc/hk2s.json
  • data/opencc/hk2t.json
  • data/opencc/jp2t.json
  • data/opencc/s2hk.json
  • data/opencc/s2t.json
  • data/opencc/s2tw.json
  • data/opencc/s2twp.json
  • data/opencc/t2hk.json
  • data/opencc/t2jp.json
  • data/opencc/t2s.json
  • data/opencc/t2tw.json
  • data/opencc/tw2s.json
  • data/opencc/tw2sp.json
  • data/opencc/tw2t.json
  • data/pinyin.yaml
  • data/preview/color_scheme_android.png
    .png
  • data/preview/color_scheme_aqua.png
    .png
  • data/preview/color_scheme_azure.png
    .png
  • data/preview/color_scheme_brasil.png
    .png
  • data/preview/color_scheme_brisk.png
    .png
  • data/preview/color_scheme_cool_breeze.png
    .png
  • data/preview/color_scheme_dark_temple.png
    .png
  • data/preview/color_scheme_doraemon.png
    .png
  • data/preview/color_scheme_dota_2.png
    .png
  • data/preview/color_scheme_espagna.png
    .png
  • data/preview/color_scheme_flypy.png
    .png
  • data/preview/color_scheme_gholabok.png
    .png
  • data/preview/color_scheme_google.png
    .png
  • data/preview/color_scheme_google_plus.png
    .png
  • data/preview/color_scheme_ink.png
    .png
  • data/preview/color_scheme_kuma_shuzboz.png
    .png
  • data/preview/color_scheme_kuon.png
    .png
  • data/preview/color_scheme_lost_temple.png
    .png
  • data/preview/color_scheme_luna.png
    .png
  • data/preview/color_scheme_macau.png
    .png
  • data/preview/color_scheme_metroblue.png
    .png
  • data/preview/color_scheme_modern_warfare.png
    .png
  • data/preview/color_scheme_nba.png
    .png
  • data/preview/color_scheme_ps4.png
    .png
  • data/preview/color_scheme_psionics.png
    .png
  • data/preview/color_scheme_skype.png
    .png
  • data/preview/color_scheme_smurfs.png
    .png
  • data/preview/color_scheme_so_young.png
    .png
  • data/preview/color_scheme_solarized_rock.png
    .png
  • data/preview/color_scheme_starcraft.png
    .png
  • data/preview/color_scheme_starcraft_ii.png
    .png
  • data/preview/color_scheme_steam.png
    .png
  • data/preview/color_scheme_tintin.png
    .png
  • data/preview/color_scheme_wii.png
    .png
  • data/preview/color_scheme_xbox_silver.png
    .png
  • data/preview/color_scheme_youtube.png
    .png
  • data/punctuation.yaml
  • data/stroke.dict.yaml
  • data/stroke.schema.yaml
  • data/symbols.yaml
  • data/terra_pinyin.dict.yaml
  • data/terra_pinyin.schema.yaml
  • data/weasel.yaml
  • data/zhuyin.yaml
  • rime-install-config.bat
    .bat .vbs
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x86 arch:x86

    87c4cc02ad78bc1f1b17053c18fc4f9a


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    f372e70e507111e5cb262f63c8136742


    Headers

    Imports

    Exports

    Sections

  • weasel.ime
    .dll windows:6 windows x86 arch:x86

    5347bc9d26d4494e5c7d325d648d6ee5


    Headers

    Imports

    Exports

    Sections

  • weaselARM.dll
    .dll regsvr32 windows:6 windows

    f7c9ed9f09fc1e70524b73aeb0879f31


    Headers

    Imports

    Exports

    Sections

  • weaselARM.ime
    .dll windows:6 windows

    814a9ee6fcfcca096fe38b46c7889eb0


    Headers

    Imports

    Exports

    Sections

  • weaselARM64.dll
  • weaselARM64.ime
  • weaselARM64X.dll
  • weaselARM64X.ime
  • weaselt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    f372e70e507111e5cb262f63c8136742


    Headers

    Imports

    Exports

    Sections

  • weaselt.ime
    .dll windows:6 windows x86 arch:x86

    5347bc9d26d4494e5c7d325d648d6ee5


    Headers

    Imports

    Exports

    Sections

  • weaseltARM.dll
    .dll regsvr32 windows:6 windows

    f7c9ed9f09fc1e70524b73aeb0879f31


    Headers

    Imports

    Exports

    Sections

  • weaseltARM.ime
    .dll windows:6 windows

    814a9ee6fcfcca096fe38b46c7889eb0


    Headers

    Imports

    Exports

    Sections

  • weaseltARM64.dll
  • weaseltARM64.ime
  • weaseltx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    e6f1e5d5055520d745a036769e445a9d


    Headers

    Imports

    Exports

    Sections

  • weaseltx64.ime
    .dll windows:6 windows x64 arch:x64

    7447c3c2b70b59b1768576bac4eb3cab


    Headers

    Imports

    Exports

    Sections

  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    e6f1e5d5055520d745a036769e445a9d


    Headers

    Imports

    Exports

    Sections

  • weaselx64.ime
    .dll windows:6 windows x64 arch:x64

    7447c3c2b70b59b1768576bac4eb3cab


    Headers

    Imports

    Exports

    Sections