MillidaLauncherSetup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MillidaLauncherSetup.exe
Size 1.8MB
Sample261002-lhsx5sty8r
SHA256 046b8e68ac8a639b95bfd93c65199ec57b037901cdec20b6734fd0e8c2de6241
MD5 8f227941683c0163d1dc5162d9b4c121
SHA1 b4679092252023ae936df303c83cc3c4ecf109c1
SHA512 454f3af3bac99180a467cc07a1f209e66b6b477f8dbc371614ccbec8e5f2f4c786d8fa6faa4d768633ad824e59666ec9f9b2f3d3bfe6e166747d04b7f499cf24
SSDEEP 24576:/FeaIlbsnOZ8RYrySH5ajbNreelNxa3OlBiviLl+XvLdOmy5PFM3VIH06iy+c:/b2dZWWySHixrTza3OOvIl+5SfYIU6ik
TLSH
T1B0858D03E65580E8C59EC078C357E532EA36BC8E0A34B5EB2BD45B553E36F906B1DB09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
MillidaLauncherSetup.exe

File Explorer

MillidaLauncherSetup.exe

.exe 1.8MB

MillidaLauncherSetup.exe

IMPHASH 59d051aeb2ab6fbbef7c28f53b0ea3aa
SHA256 046b8e68ac8a639b95bfd93c65199ec57b037901cdec20b6734fd0e8c2de6241
MD5 8f227941683c0163d1dc5162d9b4c121
SHA1 b4679092252023ae936df303c83cc3c4ecf109c1
SHA512 454f3af3bac99180a467cc07a1f209e66b6b477f8dbc371614ccbec8e5f2f4c786d8fa6faa4d768633ad824e59666ec9f9b2f3d3bfe6e166747d04b7f499cf24
SSDEEP 24576:/FeaIlbsnOZ8RYrySH5ajbNreelNxa3OlBiviLl+XvLdOmy5PFM3VIH06iy+c:/b2dZWWySHixrTza3OOvIl+5SfYIU6ik
TLSH
T1B0858D03E65580E8C59EC078C357E532EA36BC8E0A34B5EB2BD45B553E36F906B1DB09
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

88:ab:f2:33:81:c1:8f:6a:9e:2d:f4:70:c6:93:af:50:eb:a4:57:77:0f:4b:6f:e0:d9:0c:43:cb:1d:f7:7d:2f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=321595800026681,CN=ИП Веселов Никита Николаевич,O=ИП Веселов Никита Николаевич,L=Добрянка,ST=Пермский край,C=RU,1.2.840.113549.1.9.1=#0c1566726f7374626f6f6c696f40676d61696c2e636f6d,1.3.6.1.4.1.311.60.2.1.2=#13095065726d204b726169,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#130f427573696e65737320456e74697479

Chains

Sep 11, 2026

Subject

Serial Number

52:8b:bb:f0:0f:63:3b:85:05:45:18:07

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 22, 2026 - Sep 9, 2027

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

1192352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

MillidaLauncherSetup.pdb

kernel32

GetModuleHandleExW ReleaseMutex FlsSetValue HeapAlloc IsThreadAFiber CreateMutexA SleepEx ReadFileEx WriteFileEx GetProcAddress LoadLibraryA SetHandleInformation CreateThread GetModuleHandleA GetFullPathNameW SetFileTime FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW ExitProcess GetModuleFileNameW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle WaitForSingleObjectEx GetTempPathW DeleteFileW GetCurrentProcess CreateWaitableTimerExW SetWaitableTimer Sleep GetCurrentThreadId CreateFileW FindNextFileW CancelIoEx WriteFile SetFileCompletionNotificationModes CreateIoCompletionPort GetOverlappedResult ReadFile PostQueuedCompletionStatus FlsAlloc GetQueuedCompletionStatusEx GetFinalPathNameByHandleW HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee SetLastError GetModuleHandleW GetSystemTimePreciseAsFileTime GetCurrentProcessId GetSystemTimeAsFileTime CreateMutexW SetFilePointerEx GetExitCodeProcess WaitForSingleObject GetLastError SetFileInformationByHandle FindClose SwitchToThread FlsFree CloseHandle SetUnhandledExceptionFilter QueryPerformanceCounter QueryPerformanceFrequency GetEnvironmentVariableW WriteConsoleW MultiByteToWideChar GetConsoleOutputCP GetConsoleMode InitializeSListHead GetStdHandle FormatMessageW RtlVirtualUnwind WideCharToMultiByte lstrlenW RtlLookupFunctionEntry RtlCaptureContext GetCurrentDirectoryW AddVectoredExceptionHandler GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

NtCreateNamedPipeFile NtDeviceIoControlFile RtlNtStatusToDosError NtCancelIoFileEx NtCreateFile NtWriteFile NtOpenFile NtReadFile

user32

SetForegroundWindow LoadIconW LoadCursorW RegisterClassW AdjustWindowRect GetSystemMetrics FindWindowW SendMessageW ShowWindow SetTimer GetMessageW TranslateMessage DispatchMessageW PostMessageW CreateWindowExW PostQuitMessage DefWindowProcW SetWindowTextW GetDpiForSystem MessageBoxW

gdi32

CreateFontW

ws2_32

WSAGetLastError getsockname WSASend shutdown WSAIoctl recv closesocket WSASocketW ioctlsocket connect getsockopt bind setsockopt send WSAStartup WSACleanup freeaddrinfo getpeername getaddrinfo

crypt32

CertDuplicateCertificateContext CertFreeCertificateContext CertCloseStore CertGetEnhancedKeyUsage CertVerifyTimeValidity CertEnumCertificatesInStore CertOpenStore

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

bcryptprimitives

ProcessPrng

vcruntime140

memcmp memmove memcpy __CxxFrameHandler3 memset __C_specific_handler __current_exception __current_exception_context

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

__p___argc _initialize_onexit_table _exit _c_exit _seh_filter_exe _register_thread_local_exe_atexit_callback _register_onexit_function exit _crt_atexit _initterm_e terminate _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argv _set_app_type _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

MillidaLauncherSetup.exe

PE Signature issue

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

user32

gdi32

ws2_32

crypt32

bcrypt

advapi32

bcryptprimitives

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic