MillidaLauncherSetup_nosig[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MillidaLauncherSetup_nosig.exe
Size 1.8MB
Sample261011-ny81eahc28
SHA256 c7d07d48deff71ea91bd9926b4a9938e2f6e2afb1b1d590ed9ba37a0d5cd118a
MD5 4ff15b107f58b51871d4ee6dcfc9e3da
SHA1 ac53e8080bc5bf57d5e167271aa43ce4de2677b7
SHA512 0f508c658e2408fb623ed0a4fe7d75d33b497601872519a8dcf219d67a1de58068bf4c60158d6230bc4752d1ed8b66e528281dff3abfa7006fe5dcb8083abd86
SSDEEP 24576:sFeaIlbsnOZ8RYrySH5ajbNreelNxa3OlBiviLl+XvLdOmy5PFM3VIH06iy+c:sb2dZWWySHixrTza3OOvIl+5SfYIU6ik
TLSH
T17C858D03E65580E8C59EC078C357E532EA36BC8E0A34B5EB2BD45B553E36F906B1DB09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MillidaLauncherSetup_nosig.exe

File Explorer

MillidaLauncherSetup_nosig.exe

.exe 1.8MB

MillidaLauncherSetup_nosig.exe

IMPHASH 59d051aeb2ab6fbbef7c28f53b0ea3aa
SHA256 c7d07d48deff71ea91bd9926b4a9938e2f6e2afb1b1d590ed9ba37a0d5cd118a
MD5 4ff15b107f58b51871d4ee6dcfc9e3da
SHA1 ac53e8080bc5bf57d5e167271aa43ce4de2677b7
SHA512 0f508c658e2408fb623ed0a4fe7d75d33b497601872519a8dcf219d67a1de58068bf4c60158d6230bc4752d1ed8b66e528281dff3abfa7006fe5dcb8083abd86
SSDEEP 24576:sFeaIlbsnOZ8RYrySH5ajbNreelNxa3OlBiviLl+XvLdOmy5PFM3VIH06iy+c:sb2dZWWySHixrTza3OOvIl+5SfYIU6ik
TLSH
T17C858D03E65580E8C59EC078C357E532EA36BC8E0A34B5EB2BD45B553E36F906B1DB09
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1192352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

MillidaLauncherSetup.pdb

kernel32

GetModuleHandleExW ReleaseMutex FlsSetValue HeapAlloc IsThreadAFiber CreateMutexA SleepEx ReadFileEx WriteFileEx GetProcAddress LoadLibraryA SetHandleInformation CreateThread GetModuleHandleA GetFullPathNameW SetFileTime FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW ExitProcess GetModuleFileNameW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle WaitForSingleObjectEx GetTempPathW DeleteFileW GetCurrentProcess CreateWaitableTimerExW SetWaitableTimer Sleep GetCurrentThreadId CreateFileW FindNextFileW CancelIoEx WriteFile SetFileCompletionNotificationModes CreateIoCompletionPort GetOverlappedResult ReadFile PostQueuedCompletionStatus FlsAlloc GetQueuedCompletionStatusEx GetFinalPathNameByHandleW HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee SetLastError GetModuleHandleW GetSystemTimePreciseAsFileTime GetCurrentProcessId GetSystemTimeAsFileTime CreateMutexW SetFilePointerEx GetExitCodeProcess WaitForSingleObject GetLastError SetFileInformationByHandle FindClose SwitchToThread FlsFree CloseHandle SetUnhandledExceptionFilter QueryPerformanceCounter QueryPerformanceFrequency GetEnvironmentVariableW WriteConsoleW MultiByteToWideChar GetConsoleOutputCP GetConsoleMode InitializeSListHead GetStdHandle FormatMessageW RtlVirtualUnwind WideCharToMultiByte lstrlenW RtlLookupFunctionEntry RtlCaptureContext GetCurrentDirectoryW AddVectoredExceptionHandler GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

NtCreateNamedPipeFile NtDeviceIoControlFile RtlNtStatusToDosError NtCancelIoFileEx NtCreateFile NtWriteFile NtOpenFile NtReadFile

user32

SetForegroundWindow LoadIconW LoadCursorW RegisterClassW AdjustWindowRect GetSystemMetrics FindWindowW SendMessageW ShowWindow SetTimer GetMessageW TranslateMessage DispatchMessageW PostMessageW CreateWindowExW PostQuitMessage DefWindowProcW SetWindowTextW GetDpiForSystem MessageBoxW

gdi32

CreateFontW

ws2_32

WSAGetLastError getsockname WSASend shutdown WSAIoctl recv closesocket WSASocketW ioctlsocket connect getsockopt bind setsockopt send WSAStartup WSACleanup freeaddrinfo getpeername getaddrinfo

crypt32

CertDuplicateCertificateContext CertFreeCertificateContext CertCloseStore CertGetEnhancedKeyUsage CertVerifyTimeValidity CertEnumCertificatesInStore CertOpenStore

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

bcryptprimitives

ProcessPrng

vcruntime140

memcmp memmove memcpy __CxxFrameHandler3 memset __C_specific_handler __current_exception __current_exception_context

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

__p___argc _initialize_onexit_table _exit _c_exit _seh_filter_exe _register_thread_local_exe_atexit_callback _register_onexit_function exit _crt_atexit _initterm_e terminate _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argv _set_app_type _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode