Static task
static1
Behavioral task
behavioral1
Sample
WayfinderBox6.4.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
WayfinderBox6.4.exe
Resource
win10v2004-20231020-en
General
-
Target
WayfinderBox6.4.exe
-
Size
2.0MB
-
MD5
17ca1f0945eeb9026f8a9bcaeaf67f55
-
SHA1
160ddda50739d075875538294e801aedb0a51ff8
-
SHA256
4026df1c707c76fae83bc8b42225b337a7938c566e94d0b6a4be7b0a27e420d6
-
SHA512
40578f3b92e4686ace0e3485739b8abc722cdf14fcc73b8ba070b05056f10859baee8afcc7baec2bb1dd9b96f0d0b63ef7080a688079c4dfc9effd91f67e8434
-
SSDEEP
49152:+azWfGamBx/PDp5zoKoB1GQy/emSwbsQVUWsX/hf:EfGauh7p5U31ry/emS91X/N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WayfinderBox6.4.exe
Files
-
WayfinderBox6.4.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.f66 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qma Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s7y9 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE