General

  • Target

    58d180ff5d599063631bdc259ad79dd1d740f321e50b07ecfdbf05bb838eb6e6

  • Size

    11.2MB

  • MD5

    8545bc0d0ed5298d0144c52c6e72a3d7

  • SHA1

    a30a5a01335f9bd35538c50c51c8bb9de331cf0d

  • SHA256

    58d180ff5d599063631bdc259ad79dd1d740f321e50b07ecfdbf05bb838eb6e6

  • SHA512

    3781c381bc257d54bfc07f1cd7e4ff7172d652ff178a32dc6a52775c5364070dcf7610e7ab81de423e6972030fba80108d20e4a9c831cc3e92e6b4844bf9a3f2

  • SSDEEP

    196608:gUPwjP94+NnA3TUwDQC+53+9X2hfZUL2VlEEflIpQrrssy7LsEvSSrAvkZDfj0/:gU04+xwNkeCOL2nEEipQM7LsEvj8k9A

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • 58d180ff5d599063631bdc259ad79dd1d740f321e50b07ecfdbf05bb838eb6e6
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    798aaa6264af3f5296c893624ce39150


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    994d5b9bd4dea07d3136abf734982270


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x64 arch:x64

    aca339929d2ffb96e0a992282eca03fc


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x64 arch:x64

    c56e3593d199658cfa598409d4063757


    Headers

    Imports

    Exports

    Sections

  • WinSparkle.dll
    .dll windows:6 windows x64 arch:x64

    4e002faad30aed38a19bc604c73e66c7


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:6 windows x86 arch:x86

    ae670ee03d5dfb114c7a0970114e1d02


    Headers

    Imports

    Sections

  • rime-install-config.bat
    .bat .vbs
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x64 arch:x64

    242d0adf857ee9756822002541035760


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    ae5643b6c8c80c567a756f055c92655d


    Headers

    Imports

    Exports

    Sections

  • weasel.ime
    .dll windows:6 windows x86 arch:x86

    33a82917ecb1d3be6480ba0e41016446


    Headers

    Imports

    Exports

    Sections

  • weaselARM.dll
    .dll regsvr32 windows:6 windows

    420b24b8ba168687b0512f716f6a7806


    Headers

    Imports

    Exports

    Sections

  • weaselARM.ime
    .dll windows:6 windows

    0d9587c45c283253cd20908cfcf5efec


    Headers

    Imports

    Exports

    Sections

  • weaselARM64.dll
  • weaselARM64.ime
  • weaselARM64X.dll
  • weaselARM64X.ime
  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    b68b18220e04c0801d102bbba677c951


    Headers

    Imports

    Exports

    Sections

  • weaselx64.ime
    .dll windows:6 windows x64 arch:x64

    ae419991a0d0648958e794669b21a339


    Headers

    Imports

    Exports

    Sections