General

  • Target

    2f889ce3b0b6066863c883ebe3d5b5c34798d81715c7f6fd3e72ae8f3af8249d

  • Size

    12.6MB

  • MD5

    829fbff926208095ba0c9f9d0100865e

  • SHA1

    35ddc5d5e6507bc56b26d83ce8656fe04a3791ae

  • SHA256

    2f889ce3b0b6066863c883ebe3d5b5c34798d81715c7f6fd3e72ae8f3af8249d

  • SHA512

    7c11d0a5215d41c521495571d09680e561ef1f6ff5d15ab6150f44dc8cab802e9a8e296c75535375b7ee86e79897873a83c73298ae7d4ae3c09029b842ef1d54

  • SSDEEP

    393216:CDm3vWio0C24PqTsm2WRz4xhEGuuN3/q3oPmgqHL97WiI:CDm/WcpuisaRz4xau5/4oPmgqJ7Q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 2f889ce3b0b6066863c883ebe3d5b5c34798d81715c7f6fd3e72ae8f3af8249d
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    c2674610547987e150ca76c2c9c784a0


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x64 arch:x64

    a774c5503805a9c5a115bb63afe9c5ef


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x64 arch:x64

    373b27256605ad141b6290c734777eb4


    Headers

    Imports

    Exports

    Sections

  • WeaselSetup.exe
    .exe windows:6 windows x64 arch:x64

    03eefc95d7f71d4741b5d48f53799343


    Headers

    Imports

    Exports

    Sections

  • WinSparkle.dll
    .dll windows:6 windows x64 arch:x64

    14c82c15e6540594df5c7c4e00b26917


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:4 windows x86 arch:x86

    5bb7453a258f256fc2d10b359178004c


    Code Sign

    Headers

    Imports

    Sections

  • data/092R.dict.yaml
  • data/092R.schema.yaml
  • data/bopomofo.schema.yaml
  • data/bopomofo_express.schema.yaml
  • data/bopomofo_tw.schema.yaml
  • data/cangjie5.dict.yaml
  • data/cangjie5.schema.yaml
  • data/cangjie5_express.schema.yaml
  • data/default.yaml
  • data/essay.txt
  • data/key_bindings.yaml
  • data/lua/auto_select_phrase.lua
  • data/lua/calculator.lua
    .js
  • data/lua/datetime.lua
  • data/lua/start.lua
  • data/luna_pinyin.dict.yaml
  • data/luna_pinyin.schema.yaml
  • data/luna_pinyin_fluency.schema.yaml
  • data/luna_pinyin_simp.schema.yaml
  • data/luna_pinyin_tw.schema.yaml
  • data/luna_quanpin.schema.yaml
  • data/opencc/HKVariants.ocd2
  • data/opencc/HKVariantsRev.ocd2
  • data/opencc/HKVariantsRevPhrases.ocd2
  • data/opencc/JPShinjitaiCharacters.ocd2
  • data/opencc/JPShinjitaiPhrases.ocd2
  • data/opencc/JPVariants.ocd2
  • data/opencc/JPVariantsRev.ocd2
  • data/opencc/STCharacters.ocd2
  • data/opencc/STPhrases.ocd2
  • data/opencc/TSCharacters.ocd2
  • data/opencc/TSPhrases.ocd2
  • data/opencc/TWPhrases.ocd2
  • data/opencc/TWPhrasesRev.ocd2
  • data/opencc/TWVariants.ocd2
  • data/opencc/TWVariantsRev.ocd2
  • data/opencc/TWVariantsRevPhrases.ocd2
  • data/opencc/hk2s.json
  • data/opencc/hk2t.json
  • data/opencc/jp2t.json
  • data/opencc/s2hk.json
  • data/opencc/s2t.json
  • data/opencc/s2tw.json
  • data/opencc/s2twp.json
  • data/opencc/t2hk.json
  • data/opencc/t2jp.json
  • data/opencc/t2s.json
  • data/opencc/t2tw.json
  • data/opencc/tw2s.json
  • data/opencc/tw2sp.json
  • data/opencc/tw2t.json
  • data/pinyin.yaml
  • data/pinyin_simp.dict.yaml
  • data/pinyin_simp.schema.yaml
  • data/preview/color_scheme_android.png
    .png
  • data/preview/color_scheme_aqua.png
    .png
  • data/preview/color_scheme_azure.png
    .png
  • data/preview/color_scheme_brasil.png
    .png
  • data/preview/color_scheme_brisk.png
    .png
  • data/preview/color_scheme_cool_breeze.png
    .png
  • data/preview/color_scheme_dark_temple.png
    .png
  • data/preview/color_scheme_doraemon.png
    .png
  • data/preview/color_scheme_dota_2.png
    .png
  • data/preview/color_scheme_espagna.png
    .png
  • data/preview/color_scheme_flypy.png
    .png
  • data/preview/color_scheme_gholabok.png
    .png
  • data/preview/color_scheme_google.png
    .png
  • data/preview/color_scheme_google_plus.png
    .png
  • data/preview/color_scheme_ink.png
    .png
  • data/preview/color_scheme_kuma_shuzboz.png
    .png
  • data/preview/color_scheme_kuon.png
    .png
  • data/preview/color_scheme_lost_temple.png
    .png
  • data/preview/color_scheme_luna.png
    .png
  • data/preview/color_scheme_macau.png
    .png
  • data/preview/color_scheme_metroblue.png
    .png
  • data/preview/color_scheme_modern_warfare.png
    .png
  • data/preview/color_scheme_nba.png
    .png
  • data/preview/color_scheme_ps4.png
    .png
  • data/preview/color_scheme_psionics.png
    .png
  • data/preview/color_scheme_skype.png
    .png
  • data/preview/color_scheme_smurfs.png
    .png
  • data/preview/color_scheme_so_young.png
    .png
  • data/preview/color_scheme_solarized_rock.png
    .png
  • data/preview/color_scheme_starcraft.png
    .png
  • data/preview/color_scheme_starcraft_ii.png
    .png
  • data/preview/color_scheme_steam.png
    .png
  • data/preview/color_scheme_tintin.png
    .png
  • data/preview/color_scheme_wii.png
    .png
  • data/preview/color_scheme_win11dark.png
    .png
  • data/preview/color_scheme_xbox_silver.png
    .png
  • data/preview/color_scheme_youtube.png
    .png
  • data/punctuation.yaml
  • data/rime.lua
  • data/stroke.dict.yaml
  • data/stroke.schema.yaml
  • data/stzm.custom.yaml
  • data/stzm.dict.yaml
  • data/stzm.schema.yaml
  • data/stzm_phrase_after.txt
  • data/stzm_phrase_before.txt
  • data/symbols.yaml
  • data/terra_pinyin.dict.yaml
  • data/terra_pinyin.schema.yaml
  • data/weasel.yaml
  • data/wubi86.dict.yaml
  • data/wubi86.schema.yaml
  • data/wubi986.custom.yaml
  • data/wubi986.dict.yaml
  • data/wubi986.extended.dict.yaml
  • data/wubi986.schema.yaml
  • data/wubi_pinyin.schema.yaml
  • data/wubi_trad.schema.yaml
  • data/zhuyin.yaml
  • rime-install-config.bat
    .bat .vbs
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x64 arch:x64

    1992938b2a68872bfbe3563fabed17d2


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    07d2ab0c8c484978dfbd1d2a01207a21


    Headers

    Imports

    Exports

    Sections

  • weaselt.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    07d2ab0c8c484978dfbd1d2a01207a21


    Headers

    Imports

    Exports

    Sections

  • weaseltx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    45d5b5441be6daf8046aaeca36503834


    Headers

    Imports

    Exports

    Sections

  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    45d5b5441be6daf8046aaeca36503834


    Headers

    Imports

    Exports

    Sections