General

  • Target

    2026b775bf7bc3b7b0626167f790ceb733b2aafed3d2ca856e6f2ff33dd0f314

  • Size

    10.5MB

  • MD5

    3f9cd0be4d621b796c1f3b27a4dc334e

  • SHA1

    5cdc3d78448b74667d1fc33019ac46e2b98e9ef9

  • SHA256

    2026b775bf7bc3b7b0626167f790ceb733b2aafed3d2ca856e6f2ff33dd0f314

  • SHA512

    84d88a7da1c0d87d5111f45bdb15b0e2ef1c530ac923a445228af71ff45605215624e283f4ec7a1dff0429d4c8058cda7f799bbe9e0ca20e1e6188143a94c877

  • SSDEEP

    196608:K2uT7YOu8bpBgyHQC6xRekHR++h1BhAr5BBuWN/Ue3m8QQCTIAQeUHgRECNZ:K2uTMODpRwJxJHI+/bANBAs/Ue3mDQCV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 2026b775bf7bc3b7b0626167f790ceb733b2aafed3d2ca856e6f2ff33dd0f314
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    c2674610547987e150ca76c2c9c784a0


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x64 arch:x64

    618ad25387d2cde24e585f326de7dd7e


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x64 arch:x64

    bdfeaec5b652d13710e6217447da3dee


    Headers

    Imports

    Exports

    Sections

  • WinSparkle.dll
    .dll windows:6 windows x64 arch:x64

    4e002faad30aed38a19bc604c73e66c7


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:4 windows x86 arch:x86

    5bb7453a258f256fc2d10b359178004c


    Code Sign

    Headers

    Imports

    Sections

  • rime-install-config.bat
    .bat .vbs
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x64 arch:x64

    65915e9f057c5215423b5b87829accbe


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    889414a29340007452d87677df15b1f5


    Headers

    Imports

    Exports

    Sections

  • weasel.ime
    .dll windows:6 windows x86 arch:x86

    a0ffd1b7a282ebff0a47cd2a1312f7c6


    Headers

    Imports

    Exports

    Sections

  • weaselt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    889414a29340007452d87677df15b1f5


    Headers

    Imports

    Exports

    Sections

  • weaselt.ime
    .dll windows:6 windows x86 arch:x86

    a0ffd1b7a282ebff0a47cd2a1312f7c6


    Headers

    Imports

    Exports

    Sections

  • weaseltx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    4f24f6f2bf52f5df08e39031c86a56cb


    Headers

    Imports

    Exports

    Sections

  • weaseltx64.ime
    .dll windows:6 windows x64 arch:x64

    de769745d0aeda1064cbad4edca78c07


    Headers

    Imports

    Exports

    Sections

  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    4f24f6f2bf52f5df08e39031c86a56cb


    Headers

    Imports

    Exports

    Sections

  • weaselx64.ime
    .dll windows:6 windows x64 arch:x64

    de769745d0aeda1064cbad4edca78c07


    Headers

    Imports

    Exports

    Sections