XivWayfinder-0[.]1[.]1[.]4[.]zip

General

Target
XivWayfinder-0.1.1.4.zip
Size 434KB
Sample261107-vb2fdaet8m
SHA256 cccdc099d686b53057f933f9e2657eac888fe17a3adee71f1ba2cb0a0752d474
MD5 18d6e42873181af60d5851febabe2aff
SHA1 0eb82bbb363dbd9dd58c7843a23e7bb2d45aaf68
SHA512 ad637b52cb2f658a17e95c58ae6dd159dd3e31c3e7fe7ec2dbc0f82d5edcf7ecd1e2b575e3b8ca10832d899298a9ad00581e898e646d532c82965bf0be0dc982
SSDEEP 12288:V3FJjxSsWZf9IAzpxgl2jYwJClfNstog+U+:V3zbAfPpxgl2jYKEfNstog+P
TLSH
T18C9423A596F0127910C16F6EAFCB44034A97F84C545C0D9DEE93BCEB1259A8B7362B0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XivWayfinder.Core.dll
unpack001/XivWayfinder.dll

File Explorer

XivWayfinder-0.1.1.4.zip

.zip 434KB
XivWayfinder.Core.dll

.dll 530KB
XivWayfinder.dll

.dll 452KB
XivWayfinder.json

1KB

XivWayfinder-0.1.1.4.zip

SHA256 cccdc099d686b53057f933f9e2657eac888fe17a3adee71f1ba2cb0a0752d474
MD5 18d6e42873181af60d5851febabe2aff
SHA1 0eb82bbb363dbd9dd58c7843a23e7bb2d45aaf68
SHA512 ad637b52cb2f658a17e95c58ae6dd159dd3e31c3e7fe7ec2dbc0f82d5edcf7ecd1e2b575e3b8ca10832d899298a9ad00581e898e646d532c82965bf0be0dc982
SSDEEP 12288:V3FJjxSsWZf9IAzpxgl2jYwJClfNstog+U+:V3zbAfPpxgl2jYKEfNstog+P
TLSH
T18C9423A596F0127910C16F6EAFCB44034A97F84C545C0D9DEE93BCEB1259A8B7362B0F
MD5 SHA1 SHA512 SSDEEP TLSH

XivWayfinder.Core.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 08062b528c0bc3f0ea91858a954e22353cae90a0e0a4f89dbdf85716d0f27721
MD5 df8d24fec909c84df331698327ab6313
SHA1 c971e00bb4b62acaa49fbfb7aa3c077e06e8c62a
SHA512 cae5aff8b19d61dcda97903ce8a139af25b99abbc8482a5aad3362058f1dc26a4ec113b4453435f6310df8a6bf5c27e3effa16ad37eed67acaef1d39256107ed
SSDEEP 12288:z7+ykn/we656BMvgoRw+7v3/EmK3EG3yRgWe:/+N5W5vgc3AmK3E4We
TLSH
T17AC42A1033F86B2AD5FE0B75B0F44E75CE7AB41AB1B7E79E4D4864E96D927008802763
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

549126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/home/runner/work/xivwayfinder-dalamud/xiv-wayfinder-build/artifacts/obj/XivWayfinder.Core/release/XivWayfinder.Core.pdb

XivWayfinder.dll

SHA256 44f9d96846f70ca81dde73928e6ec52fe6b6f28015a018a9da4b6e7b07e15956
MD5 8bdb0a5cb6830fc302d2ad7330dbc381
SHA1 5195ced96f4fea1b119b9bdb69c2a4f89ec96515
SHA512 68f787b7cf3d719d260b6390e052ab3259fbfad54ed831d1f01bcf2bba87241f6627b5f46f96fa993e8de766b834be9c0ae047b072aa6a8ac81da790bc493b66
SSDEEP 6144:ocLMm5Q5oOKkpPLT8uT+ICx2zLiWlcrOMiwGNX/TXjaSgvI01aRp8Cffbr0ziy7G:bIqGIULumzbx09pl8iYVea72lyF5ZfR
TLSH
T153A43A6023F84765F5FF2B79F4B5045997BAB84AA8BDD34C9D0064DE2AE2740CA50B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

XivWayfinder.pdb

XivWayfinder-0.1.1.4.zip

XivWayfinder.Core.dll

mscoree

dotnet

XivWayfinder.dll

generic

XivWayfinder.json

Sharing

General

Malware Config

Signatures

File Explorer

XivWayfinder-0.1.1.4.zip

XivWayfinder.Core.dll

mscoree

dotnet

XivWayfinder.dll

generic

XivWayfinder.json