1.zip
- SHA256 0e277401a6d9b642935938d5b989a76ade30fc6a63c24384aee0a59f6f0d4a4d
Password
infected
Overview
overview
6Static
static
31.zip
windows10-2004-x64
11.zip
windows11-ltsc_2024-x64
1FastRunner...er.exe
windows10-2004-x64
6FastRunner...er.exe
windows11-ltsc_2024-x64
6FastRunner...t.json
windows10-2004-x64
3FastRunner...t.json
windows11-ltsc_2024-x64
3FastRunner...r.json
windows10-2004-x64
3FastRunner...r.json
windows11-ltsc_2024-x64
3FastRunner...s.json
windows10-2004-x64
3FastRunner...s.json
windows11-ltsc_2024-x64
3FastRunner...s.json
windows10-2004-x64
3FastRunner...s.json
windows11-ltsc_2024-x64
3FastRunner...s.json
windows10-2004-x64
3FastRunner...s.json
windows11-ltsc_2024-x64
3FastRunner...id.bin
windows10-2004-x64
3FastRunner...id.bin
windows11-ltsc_2024-x64
3FastRunner...r.json
windows10-2004-x64
3FastRunner...r.json
windows11-ltsc_2024-x64
3FastRunner...s.json
windows10-2004-x64
3FastRunner...s.json
windows11-ltsc_2024-x64
3FastRunner...g.json
windows10-2004-x64
3FastRunner...g.json
windows11-ltsc_2024-x64
3FastRunner...s.json
windows10-2004-x64
3FastRunner...s.json
windows11-ltsc_2024-x64
3FastRunner...s.json
windows10-2004-x64
3FastRunner...s.json
windows11-ltsc_2024-x64
3FastRunner...y.json
windows10-2004-x64
3FastRunner...y.json
windows11-ltsc_2024-x64
3FastRunner...s.json
windows10-2004-x64
3FastRunner...s.json
windows11-ltsc_2024-x64
3FastRunner...s.json
windows10-2004-x64
3FastRunner...s.json
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
1.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
FastRunner v0.5 — копия/FastRunner.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
15 signatures
300 seconds
Behavioral task
behavioral4
Sample
FastRunner v0.5 — копия/FastRunner.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
15 signatures
300 seconds
Behavioral task
behavioral5
Sample
FastRunner v0.5 — копия/blockscout.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral6
Sample
FastRunner v0.5 — копия/blockscout.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral7
Sample
FastRunner v0.5 — копия/cleaner.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral8
Sample
FastRunner v0.5 — копия/cleaner.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral9
Sample
FastRunner v0.5 — копия/coingecko_ids.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral10
Sample
FastRunner v0.5 — копия/coingecko_ids.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral11
Sample
FastRunner v0.5 — копия/db_settings.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral12
Sample
FastRunner v0.5 — копия/db_settings.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral13
Sample
FastRunner v0.5 — копия/derivations.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral14
Sample
FastRunner v0.5 — копия/derivations.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral15
Sample
FastRunner v0.5 — копия/fastrunner_crash/uid.bin
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral16
Sample
FastRunner v0.5 — копия/fastrunner_crash/uid.bin
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral17
Sample
FastRunner v0.5 — копия/local_parser.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral18
Sample
FastRunner v0.5 — копия/local_parser.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral19
Sample
FastRunner v0.5 — копия/multilines.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral20
Sample
FastRunner v0.5 — копия/multilines.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral21
Sample
FastRunner v0.5 — копия/mutex_config.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral22
Sample
FastRunner v0.5 — копия/mutex_config.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral23
Sample
FastRunner v0.5 — копия/notifications.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral24
Sample
FastRunner v0.5 — копия/notifications.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral25
Sample
FastRunner v0.5 — копия/patterns.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral26
Sample
FastRunner v0.5 — копия/patterns.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral27
Sample
FastRunner v0.5 — копия/proxy.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral28
Sample
FastRunner v0.5 — копия/proxy.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral29
Sample
FastRunner v0.5 — копия/routes.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral30
Sample
FastRunner v0.5 — копия/routes.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
Behavioral task
behavioral31
Sample
FastRunner v0.5 — копия/settings.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
300 seconds
Behavioral task
behavioral32
Sample
FastRunner v0.5 — копия/settings.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
300 seconds
General
- Target 1.zip
- Size 43.1MB
- Sample260729-bs993attcs
- SHA256 0e277401a6d9b642935938d5b989a76ade30fc6a63c24384aee0a59f6f0d4a4d
- MD5 658102c039a3c1378f5eecfeb56e127b
- SHA1 e07c11457100a9e29560d1c1b8e376292dd0157d
- SHA512 21c2cc1eaf8b0a0f582b616c717b59dcebf6410b997be30c1e52629bbc06387d325f13c131229c80b7151faf6038f7e23978c9ef967611321360b3d1267d16b0
- SSDEEP 786432:iNwAPy6aZ0wJxXTSAGaRfwmBy4eblqI0+nH2qpGKRtCbIVvJuYuZ:fAaZPxaaemB65qEnH2CRjCbmvPuZ
- TLSH T14EA733B85CB989B65246F638BC5F68320BBD4765A13BD83F5029D1C3984D3368BE091F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/FastRunner v0.5 — копия/FastRunner.exe unpack001/FastRunner v0.5 — копия/FastRunnerFAQ.exe unpack001/FastRunner v0.5 — копия/version.dll
File Explorer
-
1.zip.zip 43.1MB
-
FastRunner v0.5 — копия/FastRunner.exe.exe 54.7MB
-
FastRunner v0.5 — копия/FastRunnerFAQ.exe.exe 16.0MB
-
FastRunner v0.5 — копия/blockscout.json16KB
-
FastRunner v0.5 — копия/cleaner.json763B
-
FastRunner v0.5 — копия/coingecko_ids.json5KB
-
FastRunner v0.5 — копия/db_settings.json797B
-
FastRunner v0.5 — копия/derivations.json9KB
-
FastRunner v0.5 — копия/fastrunner_crash/uid.bin32B
-
FastRunner v0.5 — копия/local_parser.json1KB
-
FastRunner v0.5 — копия/multilines.json20KB
-
FastRunner v0.5 — копия/mutex_config.json3KB
-
FastRunner v0.5 — копия/notifications.json215B
-
FastRunner v0.5 — копия/patterns.json8KB
-
FastRunner v0.5 — копия/proxy.json619B
-
FastRunner v0.5 — копия/routes.json1KB
-
FastRunner v0.5 — копия/settings.json237B
-
FastRunner v0.5 — копия/templates.json1KB
-
FastRunner v0.5 — копия/text_settings.json2KB
-
FastRunner v0.5 — копия/version.dll.dll 14.2MB
-
FastRunner v0.5 — копия/wallets.json44KB
FastRunner v0.5 — копия/FastRunner.exe
- IMPHASH d8578e751f4dc8c42188279c59f0e05e
- SHA256 3493447c2b29d9112ad88039af01becf506c26ba166d863a92c3b972c8cf8e8c
- MD5 d6613b6751e20a474f05ff05f766b616
- SHA1 4d1724759aae21faa391919fa59f8f19c74e5ff1
- SHA512 4e15354c53a84dd343770d5ef1e2663e8be4f770cd7bc08d1b66bcc0378501cab204ee162a75d4e82bb04c91d9bda85f7da1876d7426c07d4c36358e866f12a3
- SSDEEP 786432:l5nVymc26v0NdchV7RM9q/84sPR0f8dugHJjpFOkVM:PnAmc2ZdZ
- TLSH T130C78D13FD6918E6D5ADC434C6AB46237F707889573067EB1768A3203F7ABE02A79314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
1
Major OS version
6
Entry point
5312
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
AddAtomA
AddVectoredContinueHandler
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateMutexA
CreateSemaphoreA
CreateThread
CreateWaitableTimerA
CreateWaitableTimerExW
DeleteAtom
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindAtomA
FormatMessageA
FreeEnvironmentStringsW
GetAtomNameA
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetErrorMode
GetHandleInformation
GetLastError
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryExW
LocalFree
MultiByteToWideChar
OpenProcess
OutputDebugStringA
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
RaiseFailFastException
ReleaseMutex
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetLastError
SetProcessAffinityMask
SetProcessPriorityBoost
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WerGetFlags
WerSetFlags
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler
msvcrt
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_commode
_endthreadex
_errno
_fmode
_initterm
_lock
_memccpy
_onexit
_setjmp
_strdup
_ultoa
_unlock
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
longjmp
malloc
memcpy
memmove
memset
printf
realloc
signal
strerror
strlen
strncmp
vfprintf
wcslen
secp256k1GoPanicError
secp256k1GoPanicIllegal
Name
.text
Size
14.2MB
Virtual Size
14.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
15.0MB
Virtual Size
15.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
24.8MB
Virtual Size
24.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
360KB
Virtual Size
360KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
32.4MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
116B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
320KB
Virtual Size
319KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
FastRunner v0.5 — копия/FastRunnerFAQ.exe
- IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
- SHA256 cde45811dab79b3cef503a0f4ee4e9188e3a080694823d79a496eb5e4213f1f7
- MD5 ce755e1f77483c60cca1425422d029bb
- SHA1 d82ba06a8f15ce669ad561c9d87efe48eb242bca
- SHA512 e87a3e9414f9db75bfda7329e4aca72f710b802dbc322553a73f040c32b9fbabf594f594a044479a029493924658ecd4cf7662137397ee6725b8e39931f7d6a6
- SSDEEP 196608:qIdhR+ODc9vOp3k7qwm8mgrgIFPH+GN4NkVxDHWKoIl:qobOu0WlgrRPeGDVVjX
- TLSH T170079D47ED6514E4C4ADC2358A625223BB317C491B2123D72BA0F6386F73BE05EFA764
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
1
Major OS version
6
Entry point
575680
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetProcAddress
LoadLibraryExW
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
QueryPerformanceCounter
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
4.2MB
Virtual Size
4.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10.8MB
Virtual Size
10.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
799KB
Virtual Size
33.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
113KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
101KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
FastRunner v0.5 — копия/blockscout.json
- SHA256 1f8b092514634de6f52101fad1ff923e48fa2943f045f5620e140808394a287c
- MD5 b67fcbc53347f5f6d64c79ac1fa673ae
- SHA1 fa9b8873a9c4500fe45cfd1429840495aea17a0d
- SHA512 373b2b86458749b13f29386403a437e4fc51ddba2d95dbabf8eb41e8faebb5ef6a7d0c9b108b7c6f2fc9e42fc73279e31b264055bb2909c19db5019270fbdc73
- SSDEEP 384:EA802er4vZQ+b8ccdJhQx6R07jZbOXrIRQAJ1lR8cRDlhpgS:D+n4alxh3
- TLSH T14072D2F7416625970BD200C4E942360EFB5A5C0BCEC4B5FBF3278682854D5F7B0A9A9D
- MD5 SHA1 SHA512 SSDEEP TLSH
FastRunner v0.5 — копия/cleaner.json
- SHA256 148468e9e932c69e67f32466f7d42fbf4a89f33438770b2b0d080f316b0b1806
- MD5 e57e99d986caddf5527d86975c6611ba
- SHA1 07e0d87c5d3b6ad25ed0ec75290f2c628fdb319d
- SHA512 933bb6bac48771d44af25384b773c8e47de6fa6a0e62ba7401eb57471787311123ee16bd647d4c7fcb1c5e3c2c8ace86996ffb8744253608116f97e08aec8255
- TLSH T120012114D51A0C802AC8A676CC4B5A872D2082477C403F1C37E2E1EC8F2E85F68B57BF
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/coingecko_ids.json
- SHA256 bfd399cfa5d268cdefe6ee1d0c9607d2e244bb1fc218a9c1e9a650a965be74e3
- MD5 01e0fab469a0d547e03fdd4c05d46123
- SHA1 32deaedd8e311bb2dbd93a22493bec990805a2f1
- SHA512 f00306f152234b05b1a58d5d5290613bcaa83024d7cd2f3e0d5c5664a7623be85086f4172f5a5b98e73beb28b1730234641f6677fc5e7c8c1e30944e4fd574d8
- SSDEEP 96:tD9AAhpy4F99dZFjvUGqBF8EKl3VCScjj8LxIItwUOBcDyjyDL2mORYbrp9lz6OZ:NvLjdsGqBGCVP8LxII0BcejyDL2lYbrz
- TLSH T18DC1CBB2A1160ACB1BFC9C88744263556884AC679FC675AE878F01C2CB9E10376FE91D
- MD5 SHA1 SHA512 SSDEEP TLSH
FastRunner v0.5 — копия/db_settings.json
- SHA256 324dbd1655686d16dd85d476f2702a40d115e9a1dde5fc87b89470517a6e661c
- MD5 7acbca027f2d65e848dff44fe355a24e
- SHA1 4d6ee5993c7adf019747e6af96621d61853b239a
- SHA512 53b498cdd28787c841ddf1a0d7b5eec0b75a91ad385b908b33402371fbdbffc8d919b2f6d9497801316b0f9983a2a65231487434581fc01f4f6f1e3f467d30de
- TLSH T1E5018920C4580EBA50D0906CEC6E86175328DD13191D7D08F2338B4D3B0E77239F6BE9
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/derivations.json
- SHA256 d78fc6659fb8b4c2567f1879747d354bce8d630c9aa2d228819003cc81733408
- MD5 f344942c923b0c669bb0de0f39bd7eef
- SHA1 59a0bcde4cc33b6a41cc8f60ec7aa83a18974580
- SHA512 fed2f8efef86c4a16bb446827c6e553b1e6a3aeffb459c3fe279ae5815c246cf3c83322148f476896c267dd1fc4d63751f17ba04bf8d379babb1bea3066df1c1
- SSDEEP 192:DIvtGSnyKJI28OTnxZWRx79Z69F6UrrZOLBZqeIEPMMEiWfainfG0Wxyk9lwa5vh:DIv4xKq2pTnx4b79Z6TlXQtQeIEPMViH
- TLSH T19D128119C8B85CB10099AA24957E1543A3618AD78E373D7C3BCC20BC4F8F6AE52FD6D1
- MD5 SHA1 SHA512 SSDEEP TLSH
FastRunner v0.5 — копия/fastrunner_crash/uid.bin
- SHA256 a48a04ad37f0ddac44c0433444d82dc1e409402f5af44401baacdd664190a9ff
- MD5 2df7affe19249cf30851757ccc4935ea
- SHA1 fee687d6f960740bff13cb80a8062e53ebc48500
- SHA512 8a14d4fb957c0bfe53593a505c37f6b02f0ca376a5627cf20062fb8a4b6f54ab90f634c6fd1692c5e80acedcf004415fa26979904f505708416faa8501dc39d5
- MD5 SHA1 SHA512
FastRunner v0.5 — копия/local_parser.json
- SHA256 e608aa7e065b67be011e2e2bbfa9ee40261d651a4344ca1a75cdd678aafb4feb
- MD5 5e443e4c35d414095b5e8bdfd88136e5
- SHA1 2c67a87dedae85f52a9decd1835fc80164b13942
- SHA512 f79bbaab7109e76c0e28b49c8d53bf47c4390d9a25980d2acb4ac7e6c4c6a32f0018d7233563723c79369ae570174591acedc51ca469f331c40886bf3e66f96e
- TLSH T17F315A20C9062CA115C4D526E85F92870D304F271D153D1D33D299AD5F1EA2F27F7ADE
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/multilines.json
- SHA256 aa4de6ad3748816dc0e64c5bccfa3a7f8568e8bd25cd6beac63eca56241ed9b9
- MD5 b99b4beae76b73b64b66ef021bc4496a
- SHA1 bc348cd7a656ce1c05fd596dad11bcecafeaedeb
- SHA512 7c1ebace33c3ec00a5c154092c85e8ed1bb5abf43616f13b93ca711de6071ef70a179035083c266b0771f4cd43d3bdecd6bc3ff68b7c061de29f58c00858675e
- SSDEEP 192:XtlqX3h87D0Fc7pf7+z/DZ4TkQlG4l/7CiyTsC3gGSG7+F14tNOlAfZuWFPWkx6b:9lqhXfVgGSGulAfZzJa
- TLSH T11992231CE5388D3268E8A56E5ABD4A93643085574EE83D2CB30D410C2F5E72FA9F72DD
- MD5 SHA1 SHA512 SSDEEP TLSH
FastRunner v0.5 — копия/mutex_config.json
- SHA256 21fab29ee974f61b91612f5c7b390235f11468fea4b0734cff8dd2e80ede0023
- MD5 107101a994cf5a340d19bd85ffd8173b
- SHA1 75ff994b4e016ee06deec1901335be1418a09744
- SHA512 a6a2269f091789906db9d63ad2f47e11d458675d5d4054a287a7da71099ab08b98ab75b7d369104773ec94ab1163f95eaa66a697dc85e7cd51f067bb6323c5c1
- TLSH T1A67167C1E9224CD2344EC525702E204261A40ABB9ECA3D0E37BD9E4D4F5D25F2AFAD4F
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/notifications.json
- SHA256 c832f3559c15caae9428fa0182bf2de6ba5b9588e53009f1e909bba948082710
- MD5 4ddc169644638ab6e4da326dfe0984ef
- SHA1 99accb277b7731dfee72da011f4f5bd9761a40c5
- SHA512 a952e8084ce0d4df4c4a230cf484b1f2c31202146ce5c8f89de32127ef1378a07b639bb9acbdc432eaa3252a55835b5611b778e893f67ca013655f54845a8e90
- TLSH T1DCD0C910C5701CEB10D4C434893E60A36210CD530A4E3C34B241823C2F0E13B23F5CE5
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/patterns.json
- SHA256 120b0bf17f4a7b5b769825542c8f71fe06281ec5708c82b9d6fcdcc263c01099
- MD5 7a796db8ff2083c5c345f53e47181c57
- SHA1 a3ccaea6eb6a5b586b8c9949c9a1cb126647ced1
- SHA512 49212c720ddf01b89f213d70eaa324f46d2b05a529812552c41f2d69a2aba6a7b4f79f25e2f5fcbdf6c617cdc2e3dc577f306b8b58e8442a34925985a3b438d3
- SSDEEP 192:tHFzrAt0qUMOwWcwy+Qyg+TdZXRczrkZEQZFxZENZZFZI+H2/XvAO101Ik1:oF0Xv51yH
- TLSH T13A02E159CEB49D3208A5E4644D3B229B38248D678EAE3C2D7B1E402C6F4D72F36F459D
- MD5 SHA1 SHA512 SSDEEP TLSH
FastRunner v0.5 — копия/proxy.json
- SHA256 337c447962cb84f80fed4a9cdb91fd92f5de91f105a69007db66ca6648d4e7e0
- MD5 da60772ffec7051d12848d824261d8cd
- SHA1 3025cd758e2fdda5ef339740af4cf339790f5f2b
- SHA512 a6ea73d6fcc05824663f12053c5d3715b11454e66ab0b5b0a7b86ae2e92b63c0e559d61bcaf5b34035394c4c65c6d6bbf41086f54969688b43155a077b5ee62a
- TLSH T1A4F022C0CA02083080AC83C0F03C000EC3820C03088E2808330A808E0F2880EA2B0838
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/routes.json
- SHA256 12c909abb024a9645bb2059cae7a9d272b6e84ff8661671377d88edf1d61fe01
- MD5 aec0791592ad892f4e0fc40312f89c8c
- SHA1 05177c5ab47d8f1e4ebd61ebc042608b754d2b88
- SHA512 b28d2eedbf61c7ef7ee6a0a24adf80b87fe9756d8913919f1c7e0400bd33ed99015bd42b7d6e739c9e0a52525fb3134a10787006a507dea3244a2d7035f19b24
- TLSH T1B0312564E5701EB121CA553AA46F4A8361304197AE693F0D3BEC112C0F3D43F89F76AE
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/settings.json
- SHA256 f09310682542947b1e0529b0bbe7f0dde631e8d9770de9ee01cf6ff25f1294c8
- MD5 ea8bd23677d660bb03a1225736d44799
- SHA1 341a91b1e341450f274821711414f7375b6bc441
- SHA512 99e3bfe40ccfcfdbb597efd618a3e9541f16efdd37d95c70cd23e0a8048e84139561c1ca6d6d8444812b9a3820648df5d88d71a0cb4606203784cc00b307ee15
- TLSH T19ED09251D4A81EFC9251447CDC8CD417BB1608972E6C3E28F101200C2F1E32DB0B0AC1
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/templates.json
- SHA256 59479ced22a7031e5de8d4d0574f4b484a598ffbfa11e0be25259183e0e2fd10
- MD5 c6fb750ee6ec2ad76d765f3e864ae109
- SHA1 e3a9f732204f35d13391525eb601fb7837e12f93
- SHA512 2ad0ab17e0991310681494ea28f734f08f5e4447fb40b1a713bd8247455d9e88f715886964ee0f0f844bb7e424e41eb6c98ea9fc9b90db4d5198b779c9a56be4
- TLSH T1ED218671C5340C42628BA2B9DA6D418769B444435DC63F103BEC425C6F3ED1F8D7A39E
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/text_settings.json
- SHA256 a39d091eab262a4b9466fe5ab6cb1107c7fd560b266b3b3fa4bd6afdd137d547
- MD5 1dde92e7201cc15613902d65ff9e9f91
- SHA1 9c17b933ee8a11c1cbc39252b162e4ffd21a6a45
- SHA512 28058595ca6e3a6785f4496784365d02f46b210db24f58cb55d9f8eb613aa51de467ef1156317f990207b5cbc183fff9326374135f4f89500f7d7809f4246752
- TLSH T177512A15D9690BFE09E4A07DEC5EC6571738DC1698087D08E2638A08360EB7231FAEDE
- MD5 SHA1 SHA512 TLSH
FastRunner v0.5 — копия/version.dll
- IMPHASH 9bc720d49ed501b15198f5b6109f5460
- SHA256 a4cf81df3292ba3ca24c580b4c169086db8fc30e7cdf4a2a6b575a08e7ca5b61
- MD5 cccda071e16ec4f0477a48e1a29d82c0
- SHA1 ae5621b265e6f9c40674f9d6905a78e9a67940ab
- SHA512 5041dd42d5ae5b8456b62a7a31dce55ec6f1bdac07a25a54c1bb185673fa3ce55989e4b42d69e128035a1d74718ddc40b0f6b87a66b6d221ddca7dd819016ba1
- SSDEEP 393216:zV0fY4cWa3suSZ7EGrH6ZlNBaxBlG0bZPgJQa:uEWaPShyBwxoJ
- TLSH T177E623FA84D522E4D9C64780B34E5BCE31C0A05A55BDBC2D3AC72C429635F9B864EE73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
6
Entry point
18193416
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
VirtualProtect
shell32
ShellExecuteA
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
_pf_GetFileVersionInfoA
_pf_GetFileVersionInfoByHandle
_pf_GetFileVersionInfoExA
_pf_GetFileVersionInfoExW
_pf_GetFileVersionInfoSizeA
_pf_GetFileVersionInfoSizeExA
_pf_GetFileVersionInfoSizeExW
_pf_GetFileVersionInfoSizeW
_pf_GetFileVersionInfoW
_pf_VerFindFileA
_pf_VerFindFileW
_pf_VerInstallFileA
_pf_VerInstallFileW
_pf_VerLanguageNameA
_pf_VerLanguageNameW
_pf_VerQueryValueA
_pf_VerQueryValueW
Name
.text
Size
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rawret0
Size
Virtual Size
8.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rawret1
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rawret2
Size
14.1MB
Virtual Size
14.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
459B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
232B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
FastRunner v0.5 — копия/wallets.json
- SHA256 17e148cf81bf0394966e3e33ee05f39a61ca6f1f3d9865f6516da21b782ddaac
- MD5 53b606032c6ca706d454a7e7b3234caa
- SHA1 89dd3ff05a75f0812ed50e4b4a3a1f7ad40f2084
- SHA512 c503afecd84147f1e57c9267076fd8559c019e69f9ebae5b93ae133819952c02f63aed743f67453b3dab1bb2876e702978ecfc757d2d741d2a583add12deb2e9
- SSDEEP 384:05aEYpDgCqHuPIY67l6lag/Dgc3V/Y3yV:QaEYpUTuPK7l6Qg/UcNYI
- TLSH T1B313BB25D1780EB3205AF53E20AE49F3B460815F8C943D653B9C862C9F8DD5F1C799AD
- MD5 SHA1 SHA512 SSDEEP TLSH