General

  • Target

    341c1ac4a0bed32cb5fd069ae314108d6dbc47548f8f7c1ad1fdf83aa292e0e2

  • Size

    12.6MB

  • MD5

    c227551faa3282f92678407fb60e06dc

  • SHA1

    3a34ce0b60edd9a90ea15bef22374b5eb5ba0b5c

  • SHA256

    341c1ac4a0bed32cb5fd069ae314108d6dbc47548f8f7c1ad1fdf83aa292e0e2

  • SHA512

    38b40999d13ec8c68c5e9bc05a22872ba0cff7fe12c37919d522dc0401564d595e448aa43d4f57c8a4948d65080225af0b6d08aae531552211ca960f22285454

  • SSDEEP

    196608:CfoxuEXeGj54grKuhxHW04kTfu5ucWEXMvkmBZbIrVB4anTM3o0TLMC51+:CwLeS4cPfskTm5uGXM/yB4anT6o0TjK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 341c1ac4a0bed32cb5fd069ae314108d6dbc47548f8f7c1ad1fdf83aa292e0e2
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    c2674610547987e150ca76c2c9c784a0


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x64 arch:x64

    a774c5503805a9c5a115bb63afe9c5ef


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x64 arch:x64

    373b27256605ad141b6290c734777eb4


    Headers

    Imports

    Exports

    Sections

  • WeaselSetup.exe
    .exe windows:6 windows x64 arch:x64

    03eefc95d7f71d4741b5d48f53799343


    Headers

    Imports

    Exports

    Sections

  • WinSparkle.dll
    .dll windows:6 windows x64 arch:x64

    14c82c15e6540594df5c7c4e00b26917


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:4 windows x86 arch:x86

    5bb7453a258f256fc2d10b359178004c


    Code Sign

    Headers

    Imports

    Sections

  • data/092R.dict.yaml
  • data/092R.schema.yaml
  • data/bopomofo.schema.yaml
  • data/bopomofo_express.schema.yaml
  • data/bopomofo_tw.schema.yaml
  • data/cangjie5.dict.yaml
  • data/cangjie5.schema.yaml
  • data/cangjie5_express.schema.yaml
  • data/default.yaml
  • data/essay.txt
  • data/key_bindings.yaml
  • data/lua/auto_select_phrase.lua
  • data/lua/calculator.lua
    .js
  • data/lua/datetime.lua
  • data/lua/number_translator.lua
  • data/lua/start.lua
  • data/luna_pinyin.dict.yaml
  • data/luna_pinyin.schema.yaml
  • data/luna_pinyin_fluency.schema.yaml
  • data/luna_pinyin_simp.schema.yaml
  • data/luna_pinyin_tw.schema.yaml
  • data/luna_quanpin.schema.yaml
  • data/opencc/HKVariants.ocd2
  • data/opencc/HKVariantsRev.ocd2
  • data/opencc/HKVariantsRevPhrases.ocd2
  • data/opencc/JPShinjitaiCharacters.ocd2
  • data/opencc/JPShinjitaiPhrases.ocd2
  • data/opencc/JPVariants.ocd2
  • data/opencc/JPVariantsRev.ocd2
  • data/opencc/STCharacters.ocd2
  • data/opencc/STPhrases.ocd2
  • data/opencc/TSCharacters.ocd2
  • data/opencc/TSPhrases.ocd2
  • data/opencc/TWPhrases.ocd2
  • data/opencc/TWPhrasesRev.ocd2
  • data/opencc/TWVariants.ocd2
  • data/opencc/TWVariantsRev.ocd2
  • data/opencc/TWVariantsRevPhrases.ocd2
  • data/opencc/hk2s.json
  • data/opencc/hk2t.json
  • data/opencc/jp2t.json
  • data/opencc/s2hk.json
  • data/opencc/s2t.json
  • data/opencc/s2tw.json
  • data/opencc/s2twp.json
  • data/opencc/t2hk.json
  • data/opencc/t2jp.json
  • data/opencc/t2s.json
  • data/opencc/t2tw.json
  • data/opencc/tw2s.json
  • data/opencc/tw2sp.json
  • data/opencc/tw2t.json
  • data/pinyin.yaml
  • data/pinyin_simp.dict.yaml
  • data/pinyin_simp.schema.yaml
  • data/preview/color_scheme_android.png
    .png
  • data/preview/color_scheme_aqua.png
    .png
  • data/preview/color_scheme_azure.png
    .png
  • data/preview/color_scheme_brasil.png
    .png
  • data/preview/color_scheme_brisk.png
    .png
  • data/preview/color_scheme_cool_breeze.png
    .png
  • data/preview/color_scheme_dark_temple.png
    .png
  • data/preview/color_scheme_doraemon.png
    .png
  • data/preview/color_scheme_dota_2.png
    .png
  • data/preview/color_scheme_espagna.png
    .png
  • data/preview/color_scheme_flypy.png
    .png
  • data/preview/color_scheme_gholabok.png
    .png
  • data/preview/color_scheme_google.png
    .png
  • data/preview/color_scheme_google_plus.png
    .png
  • data/preview/color_scheme_ink.png
    .png
  • data/preview/color_scheme_kuma_shuzboz.png
    .png
  • data/preview/color_scheme_kuon.png
    .png
  • data/preview/color_scheme_lost_temple.png
    .png
  • data/preview/color_scheme_luna.png
    .png
  • data/preview/color_scheme_macau.png
    .png
  • data/preview/color_scheme_metroblue.png
    .png
  • data/preview/color_scheme_modern_warfare.png
    .png
  • data/preview/color_scheme_nba.png
    .png
  • data/preview/color_scheme_ps4.png
    .png
  • data/preview/color_scheme_psionics.png
    .png
  • data/preview/color_scheme_skype.png
    .png
  • data/preview/color_scheme_smurfs.png
    .png
  • data/preview/color_scheme_so_young.png
    .png
  • data/preview/color_scheme_solarized_rock.png
    .png
  • data/preview/color_scheme_starcraft.png
    .png
  • data/preview/color_scheme_starcraft_ii.png
    .png
  • data/preview/color_scheme_steam.png
    .png
  • data/preview/color_scheme_tintin.png
    .png
  • data/preview/color_scheme_wii.png
    .png
  • data/preview/color_scheme_win11dark.png
    .png
  • data/preview/color_scheme_xbox_silver.png
    .png
  • data/preview/color_scheme_youtube.png
    .png
  • data/punctuation.yaml
  • data/rime.lua
  • data/stroke.dict.yaml
  • data/stroke.schema.yaml
  • data/stzm.custom.yaml
  • data/stzm.dict.yaml
  • data/stzm.schema.yaml
  • data/stzm_phrase_after.txt
  • data/stzm_phrase_before.txt
  • data/symbols.yaml
  • data/terra_pinyin.dict.yaml
  • data/terra_pinyin.schema.yaml
  • data/weasel.yaml
  • data/wubi86.dict.yaml
  • data/wubi86.schema.yaml
  • data/wubi986.custom.yaml
  • data/wubi986.dict.yaml
  • data/wubi986.extended.dict.yaml
  • data/wubi986.schema.yaml
  • data/wubi_pinyin.schema.yaml
  • data/wubi_trad.schema.yaml
  • data/zhuyin.yaml
  • rime-install-config.bat
    .bat .vbs
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x64 arch:x64

    479aa9e66e5d546e0050fc24c87abe33


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    07d2ab0c8c484978dfbd1d2a01207a21


    Headers

    Imports

    Exports

    Sections

  • weaselt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    07d2ab0c8c484978dfbd1d2a01207a21


    Headers

    Imports

    Exports

    Sections

  • weaseltx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    45d5b5441be6daf8046aaeca36503834


    Headers

    Imports

    Exports

    Sections

  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    45d5b5441be6daf8046aaeca36503834


    Headers

    Imports

    Exports

    Sections