LadonGUI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LadonGUI.exe
Size

408KB
MD5

7819a61d9c869c6daec77a517fcea7fe
SHA1

7a56987e61fc7e3cc67022c3762e69b8fea75964
SHA256

7f1a5934af469e4b304d2b65204c2b5f4fda8e01a89f78f8798361c485874772
SHA512

b57d73acdc3aaf233ffcd7ec63baa03b5ca8cc8dc8f0516f27570b51632c9bf0820690b53eee8ce00cda4d47d526a1566898f5c9ce7808f7407d94cfb986f113
SSDEEP

3072:bFpepUp1DRpg3fiHG4IZSySrwnp3HqjwYXObB2BCdaXAcaavLwkvCbAxw:ppepIAWG4D3wntK/XacXAgd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LadonGUI.exe

Files

LadonGUI.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ