XivWayfinder-0[.]1[.]1[.]3[.]zip

General

Target
XivWayfinder-0.1.1.3.zip
Size 426KB
Sample261107-vb22xaet8q
SHA256 eb7f2cb593df2eb784b1d32ad14ea0ac8e9f00e4b6627dffff5e9fafd6cf0606
MD5 77bc3e810205ef5ac3290c3c1db9a392
SHA1 f82e650718d8647c9d421b3369c32b88df8e6a8d
SHA512 b26769b83cc69bc144d1acebdc2fbfe7a8984b342f16f03beb0990ace64d079939447eef85984f9b7593b42841fa60c159a0cfded9befa624200a863775b7bba
SSDEEP 6144:1HJE5C1Ri+BhOviqqdBTLK45CoJcUEFmhTACZFky6RHQnb1q8iTk0v+vUCgrjMuS:xJQOJh8iqqdZ5BIghRZFEHQnJqrGsCgc
TLSH
T1989423A3D8BB7FFFB6E24AC506544B6222FEB6C59B8CD31315966DDE0098518CF40A13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XivWayfinder.Core.dll
unpack001/XivWayfinder.dll

File Explorer

XivWayfinder-0.1.1.3.zip

.zip 426KB
XivWayfinder.Core.dll

.dll 527KB
XivWayfinder.dll

.dll 439KB
XivWayfinder.json

1KB

XivWayfinder-0.1.1.3.zip

SHA256 eb7f2cb593df2eb784b1d32ad14ea0ac8e9f00e4b6627dffff5e9fafd6cf0606
MD5 77bc3e810205ef5ac3290c3c1db9a392
SHA1 f82e650718d8647c9d421b3369c32b88df8e6a8d
SHA512 b26769b83cc69bc144d1acebdc2fbfe7a8984b342f16f03beb0990ace64d079939447eef85984f9b7593b42841fa60c159a0cfded9befa624200a863775b7bba
SSDEEP 6144:1HJE5C1Ri+BhOviqqdBTLK45CoJcUEFmhTACZFky6RHQnb1q8iTk0v+vUCgrjMuS:xJQOJh8iqqdZ5BIghRZFEHQnJqrGsCgc
TLSH
T1989423A3D8BB7FFFB6E24AC506544B6222FEB6C59B8CD31315966DDE0098518CF40A13
MD5 SHA1 SHA512 SSDEEP TLSH

XivWayfinder.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 814ac8554e2545a1457b6125d8a3bfe5d535f32026b27d80abca75da7264ae6f
MD5 68f8047b5727f02113dc0bc9bf43fafc
SHA1 17f6b555eaed2f43dd7804fb388a27e8a06b4a74
SHA512 5d5ffb58909c62fb9e84690abd27103bdd6bb8d798e29f48de7e229248a0e45ad7e12ad725fdeae6284032c02b95e762143d3bc399b19f253409a3b1c1d1f5c6
SSDEEP 12288:kib26nibA6GueV7FRJGCmW93Ec3ZRcWW:XbycPT7xIW93EzWW
TLSH
T1FFB42B5027FCAA2AD1EF4775B0F10C78D3B6B81670BAD76D0E4A24ED2D927518C04B6B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

545870

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/home/runner/work/xivwayfinder-dalamud/xiv-wayfinder-build/artifacts/obj/XivWayfinder.Core/release/XivWayfinder.Core.pdb

XivWayfinder.dll

SHA256 242a3f4e5016340ab14b96503f7cbfb4092eae267174aa665b9fc70cad85d01b
MD5 b287feb73eaf2f14db187dc0aa84aad9
SHA1 2fc687afe4950dfbd8b438bc064182ebb76d116c
SHA512 ab3529dff3d9036c188847a3cec867522762f595f298b0922809caa183e1e5f8c8590fc8ea1dc26c73b0068c0c99b1e8c9ddf4728e45648344d8e84a57560681
SSDEEP 6144:oFq14Td9f/wXZhY3Ad6g+LY6Q6Cn8F7jVS+vYekMBFpfnxx5mppvp1oK:GqsD4ZhY3A0xLDYO2p9ro
TLSH
T179A4372423F88F69E5FF6BB9A4710414D7BAF856A57EE35C8C4460DE2CE6B408C117A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

XivWayfinder.pdb

XivWayfinder-0.1.1.3.zip

XivWayfinder.Core.dll

mscoree

dotnet

XivWayfinder.dll

generic

XivWayfinder.json

Sharing

General

Malware Config

Signatures

File Explorer

XivWayfinder-0.1.1.3.zip

XivWayfinder.Core.dll

mscoree

dotnet

XivWayfinder.dll

generic

XivWayfinder.json