General

  • Target

    1ff4413d3e2f0cf3fea2f0e6f93324728b6e50d4384812b715c24355ad4e2746

  • Size

    11.1MB

  • MD5

    a57208b4d1717d7866fe3463d792c2a7

  • SHA1

    c2cfef2fe320b5abf7697490a4d2a24b30fa85c7

  • SHA256

    1ff4413d3e2f0cf3fea2f0e6f93324728b6e50d4384812b715c24355ad4e2746

  • SHA512

    aecabae2a2d7c2b7d33f633f5bc0030f99a1e8d7b14b22e92c4c4c13d9a4d443185751c7f5e85db71d59c9989762861fe8a8e0effa84362401ef4836ba29c997

  • SSDEEP

    196608:Khx1otP75R4TaGA76RJ25CMi2grRmQsub5v88tYl3LjVO2XkBtQALHLnU:Khx1ovR4eGA7c25ViJYGhV63PVOZ5LHI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ff4413d3e2f0cf3fea2f0e6f93324728b6e50d4384812b715c24355ad4e2746
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    622eae4411b119bf4ca7bee4fa1391c8


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    c2674610547987e150ca76c2c9c784a0


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x64 arch:x64

    5b5dff1f6c02ad77035abc0a9fc545d0


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x64 arch:x64

    a079776418e4bd9eefd1b90e5985edbc


    Headers

    Imports

    Exports

    Sections

  • WinSparkle.dll
    .dll windows:6 windows x64 arch:x64

    4e002faad30aed38a19bc604c73e66c7


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:4 windows x86 arch:x86

    5bb7453a258f256fc2d10b359178004c


    Code Sign

    Headers

    Imports

    Sections

  • rime-install-config.bat
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x64 arch:x64

    242d0adf857ee9756822002541035760


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    462ff1f01523ed5a06290c3136340745


    Headers

    Imports

    Exports

    Sections

  • weasel.ime
    .dll windows:6 windows x86 arch:x86

    eb316d33d95af71dde83717d05d8ddad


    Headers

    Imports

    Exports

    Sections

  • weaselARM.dll
    .dll regsvr32 windows:6 windows

    7c7526f97a234b8b70df2c92ea1036da


    Headers

    Imports

    Exports

    Sections

  • weaselARM.ime
    .dll windows:6 windows

    731909275ef8c3a398d85ececc1c7f00


    Headers

    Imports

    Exports

    Sections

  • weaselARM64.dll
  • weaselARM64.ime
  • weaselARM64X.dll
  • weaselARM64X.ime
  • weaselt.ime
    .dll windows:6 windows x86 arch:x86

    eb316d33d95af71dde83717d05d8ddad


    Headers

    Imports

    Exports

    Sections

  • weaseltARM.ime
    .dll windows:6 windows

    731909275ef8c3a398d85ececc1c7f00


    Headers

    Imports

    Exports

    Sections

  • weaseltARM64.ime
  • weaseltx64.ime
    .dll windows:6 windows x64 arch:x64

    fcdce7777584e4f0dda2cd55a1b43723


    Headers

    Imports

    Exports

    Sections

  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    083e9d5b23c6a9ef4260643e0290e6c8


    Headers

    Imports

    Exports

    Sections

  • weaselx64.ime
    .dll windows:6 windows x64 arch:x64

    fcdce7777584e4f0dda2cd55a1b43723


    Headers

    Imports

    Exports

    Sections