General

  • Target

    0db9ac02645846b5033b403a818544371046214bfedef7e70d44f5f825713c00

  • Size

    11.1MB

  • MD5

    dc54d1d9611d52fa3629ccb4caeb9c6c

  • SHA1

    2cfb6e5404873eba09d3e75bea958d7e69708d26

  • SHA256

    0db9ac02645846b5033b403a818544371046214bfedef7e70d44f5f825713c00

  • SHA512

    45465ded81b5c23e027568691557329e1d422571125155b30c14bf664cf3310b56cc0051429317f8f15251c4d4226fd364879b03b6bb5d36667b1301561a6c34

  • SSDEEP

    196608:KTW3JbDWofNAA0ZC109Fdhf0FbWGo9mrGbZX7yyqrD+YijA92Tw67fq1hEgnT:K63JbpZ0ZCqjaemr6ZLNqHvtml0Es

Score
3/10

Malware Config

Signatures

  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • 0db9ac02645846b5033b403a818544371046214bfedef7e70d44f5f825713c00
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    c2674610547987e150ca76c2c9c784a0


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x64 arch:x64

    f1f501c5b119f5b9fad836a495e76438


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x64 arch:x64

    a17bf7506c56649e89e1920c68870a17


    Headers

    Imports

    Exports

    Sections

  • WinSparkle.dll
    .dll windows:6 windows x64 arch:x64

    4e002faad30aed38a19bc604c73e66c7


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:4 windows x86 arch:x86

    5bb7453a258f256fc2d10b359178004c


    Code Sign

    Headers

    Imports

    Sections

  • rime-install-config.bat
    .bat .vbs
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x64 arch:x64

    7ed9f01ed2b0c8c38c9eebab29ff788a


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    6cefb2f169ad8e262438115fe5502df0


    Headers

    Imports

    Exports

    Sections

  • weasel.ime
    .dll windows:6 windows x86 arch:x86

    a0ffd1b7a282ebff0a47cd2a1312f7c6


    Headers

    Imports

    Exports

    Sections

  • weaselARM.dll
    .dll regsvr32 windows:6 windows

    b214579a2720e540cc4e9dac980c2648


    Headers

    Imports

    Exports

    Sections

  • weaselARM.ime
    .dll windows:6 windows

    d08a5fe1329be38ef3db536d7d157f85


    Headers

    Imports

    Exports

    Sections

  • weaselARM64.dll
  • weaselARM64.ime
  • weaselARM64X.dll
  • weaselARM64X.ime
  • weaselt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    6cefb2f169ad8e262438115fe5502df0


    Headers

    Imports

    Exports

    Sections

  • weaselt.ime
    .dll windows:6 windows x86 arch:x86

    a0ffd1b7a282ebff0a47cd2a1312f7c6


    Headers

    Imports

    Exports

    Sections

  • weaseltARM.dll
    .dll regsvr32 windows:6 windows

    b214579a2720e540cc4e9dac980c2648


    Headers

    Imports

    Exports

    Sections

  • weaseltARM.ime
    .dll windows:6 windows

    d08a5fe1329be38ef3db536d7d157f85


    Headers

    Imports

    Exports

    Sections

  • weaseltARM64.dll
  • weaseltARM64.ime
  • weaseltx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    5b5209dba2ea36402327f9ee6b3be7c9


    Headers

    Imports

    Exports

    Sections

  • weaseltx64.ime
    .dll windows:6 windows x64 arch:x64

    a6a7d9b627521c6841c549da170f8d95


    Headers

    Imports

    Exports

    Sections

  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    5b5209dba2ea36402327f9ee6b3be7c9


    Headers

    Imports

    Exports

    Sections

  • weaselx64.ime
    .dll windows:6 windows x64 arch:x64

    a6a7d9b627521c6841c549da170f8d95


    Headers

    Imports

    Exports

    Sections