Ladon911[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Ladon911.exe
Size

2.1MB
MD5

0b993e62fdf26d0973f071df756d3b88
SHA1

ab08027337755f2c1de697751735a4fc1d9e6162
SHA256

8501e8b29d1ae257e70054aeeb1f5a069a58b0cb71625a8b530288ac93060dc8
SHA512

b4a1f5d21ca09621bb1ca6ee65dcc9acd3abda8d6e6ef9fe9310bde713f17b52c0ce95d18264ce31ba7d5574a2eeb470fe4e56ee75d5de42d54443913eb19b0b
SSDEEP

49152:7yDsl/dWcTiexwHLt/lLVrt7cAjZ7cQjzp0rbQllfgEwhUihZBIpD4D:7yDsvWcTiuwHJlZRYh/QzfxwhUi3BIU

Score

1^/10

Malware Config

Signatures

Files

Ladon911.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:23

Not After

01-09-2022 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:76:19:0a:61:fe:9a:ee:ca:f5:94:14:44:4d:11:a2:ab:fb:f0:14:98:c2:67:c0:f5:c9:25:63:04:33:06:5e
Signer

Actual PE Digest

7f:76:19:0a:61:fe:9a:ee:ca:f5:94:14:44:4d:11:a2:ab:fb:f0:14:98:c2:67:c0:f5:c9:25:63:04:33:06:5e

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

11-05-2023 10:06
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3bCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

7f:76:19:0a:61:fe:9a:ee:ca:f5:94:14:44:4d:11:a2:ab:fb:f0:14:98:c2:67:c0:f5:c9:25:63:04:33:06:5eSigner

Signature Validations

Verification

11-05-2023 10:06 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 180KB - Virtual size: 180KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

7f:76:19:0a:61:fe:9a:ee:ca:f5:94:14:44:4d:11:a2:ab:fb:f0:14:98:c2:67:c0:f5:c9:25:63:04:33:06:5e
Signer

11-05-2023 10:06
Valid: false

.text
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 180KB - Virtual size: 180KB

.reloc
Size: 512B - Virtual size: 12B