General

  • Target

    efa114b20a8cda39c34316cd1a9b5ed25ac0581891aa3e485c830ff7cc2dbdd9

  • Size

    11.1MB

  • MD5

    4f09dcf465eb579b71bae2484b9a899f

  • SHA1

    e191c43ad29689005016ef6cb2dba12bda23b167

  • SHA256

    efa114b20a8cda39c34316cd1a9b5ed25ac0581891aa3e485c830ff7cc2dbdd9

  • SHA512

    e03ba2a3bd7edd8fe5b0d5f86658275401970ba6901fa4d4090d752471dfd9246ae60b622b286bc1e6880f610673db91e17c11fcfac44a5d289c18c487e21629

  • SSDEEP

    196608:gCjLji0qUV1NeTxeDhbYhxCNfVmmvB6evBXZFRL8ohHc+P4n9JGv1PF2kVe25of0:gCjHxRDhSxCNVmmk23RL8ohHcuvxIkHX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • efa114b20a8cda39c34316cd1a9b5ed25ac0581891aa3e485c830ff7cc2dbdd9
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    3b477381217c97b22146297f93df2a92


    Headers

    Imports

    Exports

    Sections

  • 7-zip-license.txt
  • 7z.dll
    .dll windows:4 windows x86 arch:x86

    798aaa6264af3f5296c893624ce39150


    Headers

    Imports

    Exports

    Sections

  • 7z.exe
    .exe windows:4 windows x86 arch:x86

    994d5b9bd4dea07d3136abf734982270


    Headers

    Imports

    Sections

  • COPYING-curl.txt
  • LICENSE.txt
  • README.txt
  • WeaselDeployer.exe
    .exe windows:6 windows x64 arch:x64

    02bd301b60667c0a4e594dfcb833f2ce


    Headers

    Imports

    Exports

    Sections

  • WeaselServer.exe
    .exe windows:6 windows x64 arch:x64

    b3759ca5490a6c6e97139f3b9c11a5ed


    Headers

    Imports

    Exports

    Sections

  • WinSparkle.dll
    .dll windows:6 windows x64 arch:x64

    4e002faad30aed38a19bc604c73e66c7


    Headers

    Imports

    Exports

    Sections

  • curl-ca-bundle.crt
  • curl.exe
    .exe windows:6 windows x86 arch:x86

    ae670ee03d5dfb114c7a0970114e1d02


    Headers

    Imports

    Sections

  • rime-install-config.bat
    .bat .vbs
  • rime-install.bat
    .bat .vbs
  • rime.dll
    .dll windows:6 windows x64 arch:x64

    242d0adf857ee9756822002541035760


    Headers

    Imports

    Exports

    Sections

  • start_service.bat
  • stop_service.bat
  • weasel.dll
    .dll regsvr32 windows:6 windows x86 arch:x86

    54b5a968faa0ce66efb939c4a50ef085


    Headers

    Imports

    Exports

    Sections

  • weasel.ime
    .dll windows:6 windows x86 arch:x86

    6d0f1a1224c85575b589712c8781ab7e


    Headers

    Imports

    Exports

    Sections

  • weaselARM.dll
    .dll regsvr32 windows:6 windows

    09d77c0645100d9fc3cc7bd84b5bb46c


    Headers

    Imports

    Exports

    Sections

  • weaselARM.ime
    .dll windows:6 windows

    b139c8971300f27bbe86eb92afd2dfce


    Headers

    Imports

    Exports

    Sections

  • weaselARM64.dll
  • weaselARM64.ime
  • weaselARM64X.dll
  • weaselARM64X.ime
  • weaselx64.dll
    .dll regsvr32 windows:6 windows x64 arch:x64

    58dda908f3252aebd9d6924de879014e


    Headers

    Imports

    Exports

    Sections

  • weaselx64.ime
    .dll windows:6 windows x64 arch:x64

    35e9414e05e12a044350a709ef2602c6


    Headers

    Imports

    Exports

    Sections