PalworldServer[.]exe[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PalworldServer.exe.zip
Size

1.5MB
MD5

615b015360df93f2838b6a40de844e18
SHA1

16f0b234bd05e01477d983f793c749b160f4b9f7
SHA256

7092bee926791f261bf355b2d0014db1076772efc84b495285136de67a71331e
SHA512

a5043b46308683017014a136f7911ab9ab4e7f7d33e170cf851d21ddf17e728f56fbb1ccb8d5f3d7bc6790468a0bed9c90cc1dff6c7fc2fba728231a7b49d07c
SSDEEP

24576:HwT5EiqUN0zfLxMijOkG2e2Gj5OK+sZ9M/ElEyDmi9PJMA1GErPehvzE2JdDORPf:H8Eg2rLxMAVG2epgKdu8lEK1mA1Le42G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PalworldServer.exe

Files

PalworldServer.exe.zip
.zip
PalworldServer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Dev\Other\PalworldServer\PalworldServer\obj\Debug\PalworldServer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PalworldServer.exe.config