PalHax[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

PalHax.exe
Size

141KB
MD5

89b75c00d32f7d33aad6ed9af256bca0
SHA1

df698d8f4458ed250e173d38a121d3116a3bd6dc
SHA256

c6880cc79d340978d51320e9cfad876cd98154b352d329b3be3f0bd83af90548
SHA512

b99b152be62f0bbf7218fe99c3c39a7857ca882531b47e17e048451d8e85f08d737357a1e8861f53b2f99fccb459a0f47c4a573f28857c7a89d7a5fe8027583b
SSDEEP

3072:lv/qzYlTP+/ShLHClbkFtNbwREE+OAnans5+Z9T:V/TPgSBClb6P10s5+Z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PalHax.exe

Files

PalHax.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Lil_N\source\repos\PalHax\PalHax\obj\Release\PalHax.pdb

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ