General

  • Target

    e327e62c580927a9d9e42461a1e6824a74fae0a8493da90f8205c358af1d7f40

  • Size

    11.0MB

  • MD5

    cb9394796d2b3395c949cf1b65108d94

  • SHA1

    3cfd89db06e30e0e7a0671883f1fef35cd44c63a

  • SHA256

    e327e62c580927a9d9e42461a1e6824a74fae0a8493da90f8205c358af1d7f40

  • SHA512

    20fb06853808ca921ca647e3d895c613ef1c1aa05ed39b8c1b8b8e621aa47276349bca6171585c6e410cc8d2fc2a8582ceecd11433e0399d9796649274129883

  • SSDEEP

    196608:KMVjxvTLZf86z3M0oNjPPdzSiwvqxfmGhM7dx+Mh65ihuJDGkQipzZN3RGLHMlBk:KmjpO6jM0YjPPdzBrx+8MbD0JDGfipz6

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • e327e62c580927a9d9e42461a1e6824a74fae0a8493da90f8205c358af1d7f40
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    c2674610547987e150ca76c2c9c784a0


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x64 arch:x64

    bc557a3bad8d66ba328c6e1878b3d1f2


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x64 arch:x64

    0db358f81382aba0163321c9497c761a


    Headers

    Imports

    Exports

    Sections

  • WinSparkle.dll
    .dll windows:6 windows x64 arch:x64

    4e002faad30aed38a19bc604c73e66c7


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:4 windows x86 arch:x86

    5bb7453a258f256fc2d10b359178004c


    Code Sign

    Headers

    Imports

    Sections

  • rime-install-config.bat
    .bat .vbs
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x64 arch:x64

    a6f2c8e667b12660c29065fe57c11bcf


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    f372e70e507111e5cb262f63c8136742


    Headers

    Imports

    Exports

    Sections

  • weasel.ime
    .dll windows:6 windows x86 arch:x86

    5347bc9d26d4494e5c7d325d648d6ee5


    Headers

    Imports

    Exports

    Sections

  • weaselARM.dll
    .dll regsvr32 windows:6 windows

    f7c9ed9f09fc1e70524b73aeb0879f31


    Headers

    Imports

    Exports

    Sections

  • weaselARM.ime
    .dll windows:6 windows

    814a9ee6fcfcca096fe38b46c7889eb0


    Headers

    Imports

    Exports

    Sections

  • weaselARM64.dll
  • weaselARM64.ime
  • weaselARM64X.dll
  • weaselARM64X.ime
  • weaselt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    f372e70e507111e5cb262f63c8136742


    Headers

    Imports

    Exports

    Sections

  • weaselt.ime
    .dll windows:6 windows x86 arch:x86

    5347bc9d26d4494e5c7d325d648d6ee5


    Headers

    Imports

    Exports

    Sections

  • weaseltARM.dll
    .dll regsvr32 windows:6 windows

    f7c9ed9f09fc1e70524b73aeb0879f31


    Headers

    Imports

    Exports

    Sections

  • weaseltARM.ime
    .dll windows:6 windows

    814a9ee6fcfcca096fe38b46c7889eb0


    Headers

    Imports

    Exports

    Sections

  • weaseltARM64.dll
  • weaseltARM64.ime
  • weaseltx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    e6f1e5d5055520d745a036769e445a9d


    Headers

    Imports

    Exports

    Sections

  • weaseltx64.ime
    .dll windows:6 windows x64 arch:x64

    7447c3c2b70b59b1768576bac4eb3cab


    Headers

    Imports

    Exports

    Sections

  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    e6f1e5d5055520d745a036769e445a9d


    Headers

    Imports

    Exports

    Sections

  • weaselx64.ime
    .dll windows:6 windows x64 arch:x64

    7447c3c2b70b59b1768576bac4eb3cab


    Headers

    Imports

    Exports

    Sections