MillidaLauncherSetup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
MillidaLauncherSetup.exe
Size 1.8MB
Sample261113-sle9sacz51
SHA256 100f324a6020a49bf16ea21360f98efb48c704adda5d0ac521176ebbd77fd9b0
MD5 8d59962cc350242576e085fdd8f6cd3e
SHA1 ed5b589fb306f4a0292e5b21bf3dc3cfc8e1a129
SHA512 f39857bc6b6aeed081c5c4430e9ab69f4a45184c5d8ea06156053dda7ca3be6f9070f87029c73b31bf2f1d7238c24c8618f887b6fd98402b3ed2f922d267262c
SSDEEP 24576:/FeaIlbsnOZ8RYrySH5ajbNreelNxa3OlBiviLl+XvLdOmy5PFM3VIH06iy+:/b2dZWWySHixrTza3OOvIl+5SfYIU6i
TLSH
T10F958D03E65580E8C59EC078C357E532EA36BC8E0A34B5EB2BD45B553E36F906B1DB09
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
MillidaLauncherSetup.exe

File Explorer

MillidaLauncherSetup.exe

.exe 1.8MB

MillidaLauncherSetup.exe

IMPHASH 59d051aeb2ab6fbbef7c28f53b0ea3aa
SHA256 100f324a6020a49bf16ea21360f98efb48c704adda5d0ac521176ebbd77fd9b0
MD5 8d59962cc350242576e085fdd8f6cd3e
SHA1 ed5b589fb306f4a0292e5b21bf3dc3cfc8e1a129
SHA512 f39857bc6b6aeed081c5c4430e9ab69f4a45184c5d8ea06156053dda7ca3be6f9070f87029c73b31bf2f1d7238c24c8618f887b6fd98402b3ed2f922d267262c
SSDEEP 24576:/FeaIlbsnOZ8RYrySH5ajbNreelNxa3OlBiviLl+XvLdOmy5PFM3VIH06iy+:/b2dZWWySHixrTza3OOvIl+5SfYIU6i
TLSH
T10F958D03E65580E8C59EC078C357E532EA36BC8E0A34B5EB2BD45B553E36F906B1DB09
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

a8:86:a2:e3:98:47:63:61:cc:75:90:6d:c7:0e:83:b0:fd:18:37:45:b0:dd:0a:8b:0a:45:3a:6a:31:69:f5:bb

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=321595800026681,CN=ИП Веселов Никита Николаевич,O=ИП Веселов Никита Николаевич,L=Добрянка,ST=Пермский край,C=RU,1.2.840.113549.1.9.1=#0c1566726f7374626f6f6c696f40676d61696c2e636f6d,1.3.6.1.4.1.311.60.2.1.2=#13095065726d204b726169,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#130f427573696e65737320456e74697479

Chains

Sep 11, 2026

Subject

Serial Number

52:8b:bb:f0:0f:63:3b:85:05:45:18:07

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 22, 2026 - Sep 9, 2027

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

1192352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

MillidaLauncherSetup.pdb

kernel32

GetModuleHandleExW ReleaseMutex FlsSetValue HeapAlloc IsThreadAFiber CreateMutexA SleepEx ReadFileEx WriteFileEx GetProcAddress LoadLibraryA SetHandleInformation CreateThread GetModuleHandleA GetFullPathNameW SetFileTime FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW ExitProcess GetModuleFileNameW GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle WaitForSingleObjectEx GetTempPathW DeleteFileW GetCurrentProcess CreateWaitableTimerExW SetWaitableTimer Sleep GetCurrentThreadId CreateFileW FindNextFileW CancelIoEx WriteFile SetFileCompletionNotificationModes CreateIoCompletionPort GetOverlappedResult ReadFile PostQueuedCompletionStatus FlsAlloc GetQueuedCompletionStatusEx GetFinalPathNameByHandleW HeapReAlloc HeapFree GetProcessHeap GetCurrentThread SetThreadStackGuarantee SetLastError GetModuleHandleW GetSystemTimePreciseAsFileTime GetCurrentProcessId GetSystemTimeAsFileTime CreateMutexW SetFilePointerEx GetExitCodeProcess WaitForSingleObject GetLastError SetFileInformationByHandle FindClose SwitchToThread FlsFree CloseHandle SetUnhandledExceptionFilter QueryPerformanceCounter QueryPerformanceFrequency GetEnvironmentVariableW WriteConsoleW MultiByteToWideChar GetConsoleOutputCP GetConsoleMode InitializeSListHead GetStdHandle FormatMessageW RtlVirtualUnwind WideCharToMultiByte lstrlenW RtlLookupFunctionEntry RtlCaptureContext GetCurrentDirectoryW AddVectoredExceptionHandler GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ntdll

NtCreateNamedPipeFile NtDeviceIoControlFile RtlNtStatusToDosError NtCancelIoFileEx NtCreateFile NtWriteFile NtOpenFile NtReadFile

user32

SetForegroundWindow LoadIconW LoadCursorW RegisterClassW AdjustWindowRect GetSystemMetrics FindWindowW SendMessageW ShowWindow SetTimer GetMessageW TranslateMessage DispatchMessageW PostMessageW CreateWindowExW PostQuitMessage DefWindowProcW SetWindowTextW GetDpiForSystem MessageBoxW

gdi32

CreateFontW

ws2_32

WSAGetLastError getsockname WSASend shutdown WSAIoctl recv closesocket WSASocketW ioctlsocket connect getsockopt bind setsockopt send WSAStartup WSACleanup freeaddrinfo getpeername getaddrinfo

crypt32

CertDuplicateCertificateContext CertFreeCertificateContext CertCloseStore CertGetEnhancedKeyUsage CertVerifyTimeValidity CertEnumCertificatesInStore CertOpenStore

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

bcryptprimitives

ProcessPrng

vcruntime140

memcmp memmove memcpy __CxxFrameHandler3 memset __C_specific_handler __current_exception __current_exception_context

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

__p___argc _initialize_onexit_table _exit _c_exit _seh_filter_exe _register_thread_local_exe_atexit_callback _register_onexit_function exit _crt_atexit _initterm_e terminate _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __p___argv _set_app_type _cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free _set_new_mode

Sharing

General

Malware Config

Signatures

File Explorer

MillidaLauncherSetup.exe

PE Signature issue

kernel32

api-ms-win-core-synch-l1-2-0

ntdll

user32

gdi32

ws2_32

crypt32

bcrypt

advapi32

bcryptprimitives

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic