ChatLadon[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ChatLadon.exe
Size

638KB
MD5

1f040434a5bbaa855822ab4bed5fde2b
SHA1

007339061377223bc6ac90478835c3a39a293e56
SHA256

d1f18898fe21fd80a5d4e33175d6b8ef0304fcf25d95cbcd7f6f3b867552f490
SHA512

cd432b85e95bb8197673e0c1ba9a94c8ebfd6ddbf3fa19d8406053657aed5542efcf1064fba9c8be86309894c94a490d42517f1f2ac9f0fbeb290398746183a4
SSDEEP

12288:nZG7UjBhQ/mX8suyP5EOt4QsjNf998kfsLnMG3IxuAkOvior:nZG7Ujzc+uyBEOa1fMkULMG3IgAkvor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ChatLadon.exe

Files

ChatLadon.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ