C:\Users\User3005\Desktop\KINDAW\Mylenium\MyleniumEx\MyleniumClient\Mylenium.pdb
Static task
static1
Behavioral task
behavioral1
Sample
da918852ef24b4ea6cc18af0920dd6b0b1c283c92e3ba94fa951c7a8e18d2915.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da918852ef24b4ea6cc18af0920dd6b0b1c283c92e3ba94fa951c7a8e18d2915.exe
Resource
win10v2004-20240802-en
General
-
Target
da918852ef24b4ea6cc18af0920dd6b0b1c283c92e3ba94fa951c7a8e18d2915
-
Size
8.6MB
-
MD5
31acaebe1b8f344b96c1657f2c9d1729
-
SHA1
ebf7216d076194399ead0c1d35689f63d3853bfc
-
SHA256
da918852ef24b4ea6cc18af0920dd6b0b1c283c92e3ba94fa951c7a8e18d2915
-
SHA512
185b04467d03f032876af7249b8828d1d70ed2748f0023c5e31d9878067d6682ef98730a18654a5518605e18992be939d830a64f65ddd8117fb4fd8962140a3a
-
SSDEEP
98304:aTMnQSJpuI1vUOJIRCy+U7+bMjcuMtQCNXByOBb2lL65HLDSVkTj6yCa6xV4fByi:lnNT1JACy+y4MjcuMfXAOLDGyKY7G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da918852ef24b4ea6cc18af0920dd6b0b1c283c92e3ba94fa951c7a8e18d2915
Files
-
da918852ef24b4ea6cc18af0920dd6b0b1c283c92e3ba94fa951c7a8e18d2915.exe windows:6 windows x86 arch:x86
a51fa54991e100d722766c47cdb50975
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetPriorityClass
GetModuleFileNameA
CreateThread
FindNextFileA
FindFirstFileA
FindClose
MultiByteToWideChar
GlobalFree
lstrlenA
TerminateProcess
GetPrivateProfileStringA
HeapSize
GetCommandLineW
GetCommandLineA
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateMutexA
GetLastError
ReleaseMutex
DeleteFileA
GetCurrentDirectoryA
GetTickCount
GetCurrentDirectoryW
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetComputerNameA
GetWindowsDirectoryA
IsProcessorFeaturePresent
GetVolumeInformationA
WriteConsoleW
GetOEMCP
IsValidCodePage
HeapReAlloc
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
SetFileAttributesA
Module32Next
Module32First
Process32Next
Process32First
CreateToolhelp32Snapshot
GetSystemInfo
OpenProcess
SetThreadPriority
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
HeapQueryInformation
CompareStringW
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetConsoleMode
GetTimeZoneInformation
UnlockFileEx
LockFileEx
HeapCompact
CreateProcessW
FlushFileBuffers
SetFilePointerEx
VirtualQuery
VirtualProtect
VirtualAlloc
SetStdHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
ExitProcess
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
RaiseException
GetThreadTimes
GetCurrentThread
FindFirstFileExA
WaitNamedPipeW
PeekNamedPipe
GetModuleFileNameW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
FlushViewOfFile
GetStdHandle
ExpandEnvironmentStringsW
ResetEvent
SetConsoleCtrlHandler
GetACP
GetExitCodeProcess
GenerateConsoleCtrlEvent
GetProcessTimes
MoveFileW
GetSystemTime
GetFileType
CreateProcessA
SystemTimeToFileTime
SetEnvironmentVariableA
DeleteFileW
SetCurrentDirectoryA
GetVersion
DuplicateHandle
GetEnvironmentVariableA
CreatePipe
SetEnvironmentVariableW
RemoveDirectoryW
GetFileAttributesExA
SetErrorMode
LoadLibraryExA
GetFullPathNameA
TlsFree
TlsGetValue
HeapAlloc
TlsAlloc
SetLastError
HeapFree
TlsSetValue
SetEndOfFile
IsDBCSLeadByte
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
GetFileAttributesA
FindResourceW
FindResourceA
SizeofResource
LoadResource
LockResource
InterlockedDecrement
GetProcessHeap
HeapValidate
InterlockedIncrement
GetCPInfo
CompareStringEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
EnterCriticalSection
InitializeCriticalSection
CreateSemaphoreExW
CreateEventExW
SleepConditionVariableCS
InitOnceExecuteOnce
InitializeSRWLock
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
QueryPerformanceFrequency
GetStringTypeW
CloseHandle
MoveFileA
GlobalAlloc
AllocConsole
CreateDirectoryA
RemoveDirectoryA
GetTempPathA
GetTempFileNameA
OutputDebugStringA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateFileA
GetFileSize
SetUnhandledExceptionFilter
GetCurrentThreadId
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
WriteFile
LocalAlloc
LocalFree
FormatMessageA
GetModuleHandleA
GetVersionExA
GetSystemDirectoryA
FreeLibrary
GlobalUnlock
GlobalLock
lstrlenW
WideCharToMultiByte
CompareStringA
GetLocaleInfoA
ReleaseSemaphore
CreateSemaphoreA
CopyFileA
QueryPerformanceCounter
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetLocaleInfoEx
SetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileAttributesW
SetFileInformationByHandle
SetFileTime
GetTempPathW
AreFileApisANSI
DeviceIoControl
GetModuleHandleW
CreateDirectoryExW
CopyFileW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
Sleep
user32
MoveWindow
RegisterClassExA
CreateWindowExA
IsWindow
SetFocus
UpdateWindow
GetWindowLongA
SetWindowLongA
CharNextExA
CharPrevExA
RegisterClassA
GetMenu
SetWindowTextA
GetWindowRect
AdjustWindowRectEx
LoadCursorA
PostQuitMessage
FlashWindowEx
SetWindowPos
GetAsyncKeyState
GetSystemMetrics
GetCursorPos
ScreenToClient
FindWindowA
LoadIconA
SystemParametersInfoA
GetKeyState
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ClientToScreen
ShowWindow
GetCapture
SetCapture
ReleaseCapture
ChangeDisplaySettingsA
IsIconic
PeekMessageA
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
GetClientRect
FillRect
SetRect
OffsetRect
LoadStringA
UnregisterClassA
MessageBoxA
DefWindowProcA
GetMessageA
DestroyWindow
CharPrevA
GetMonitorInfoA
MonitorFromPoint
CharNextW
DispatchMessageA
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
TranslateMessage
gdi32
GetTextExtentPoint32A
EnumFontFamiliesExA
GetStockObject
StretchBlt
PatBlt
DeleteObject
CreateSolidBrush
CreateCompatibleDC
DeleteDC
SelectObject
SetBkColor
SetBkMode
SetDIBitsToDevice
SetTextColor
CreateDIBSection
TextOutA
CreateFontIndirectA
GetCharABCWidthsFloatW
GetTextExtentPoint32W
TextOutW
GetDeviceCaps
GetPixel
advapi32
RegOpenKeyExA
CryptAcquireContextA
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegFlushKey
RegQueryValueA
RegSetValueExA
RegLoadKeyA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegConnectRegistryA
RegSaveKeyA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
CryptGenRandom
CryptReleaseContext
RegEnumKeyExA
shell32
SetCurrentProcessExplicitAppUserModelID
ShellExecuteA
SHGetSpecialFolderPathA
ShellExecuteW
ole32
OleSetContainedObject
OleUninitialize
OleInitialize
CoGetClassObject
CoUninitialize
CoCreateInstance
CoInitialize
CoInitializeEx
winmm
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetTime
d3d8
Direct3DCreate8
iphlpapi
GetAdaptersInfo
imm32
ImmNotifyIME
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
wininet
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetOpenA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
devil
ilLoad
ilConvertImage
ilCopyPixels
ilEnable
ilGetInteger
ilShutDown
ilSave
ilSetPixels
ilTexImage
ilInit
ilDeleteImages
ilGenImages
ilBindImage
ilOriginFunc
mss32
_AIL_3D_sample_volume@4
_AIL_update_3D_position@8
_AIL_auto_update_3D_position@8
_AIL_last_error@0
_AIL_mem_free_lock@4
_AIL_file_read@8
_AIL_set_file_callbacks@16
_AIL_WAV_info@8
_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_close_digital_driver@4
_AIL_enumerate_3D_providers@12
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_open_stream@12
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_end_3D_sample@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
speedtreert
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
??1STextures@CSpeedTreeRT@@QAE@XZ
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
dinput8
DirectInput8Create
ws2_32
__WSAFDIsSet
gethostname
connect
ioctlsocket
recv
select
send
socket
WSAGetLastError
WSAStartup
WSACleanup
htonl
htons
inet_addr
ntohl
ntohs
gethostbyname
closesocket
ddraw
DirectDrawCreate
oleaut32
SysFreeString
VariantClear
VariantInit
SafeArrayAccessData
SysAllocString
SafeArrayCreate
SafeArrayDestroy
Sections
.text Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 515KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ