rungame[.]exe | Triage™

Resubmissions

09/08/2026, 22:31

260809-2fq9jaen4x

09/08/2026, 22:30

260809-2eyxzscg483

Sharing

Copy URL Twitter E-mail

General

Target
rungame.exe
Size 1.1MB
Sample260809-2fq9jaen4x
SHA256 f394dd656183860e307ded6b462e65db348425413e8a2b2fcb096cd86b6b5e78
MD5 a82f41d81b9f18b7531e3f0cd707c327
SHA1 33ab41157ca0891f054856c39d87f391a3b6b001
SHA512 7029aee19d2589bd813d555d07b791e75958d6af3c19e1b6cef2bd3876c7be5ca42ab5c81a8bcfed497f292f4a505055860350633717755a2e50a2d5bfeba30f
SSDEEP 24576:7mRedtMVDuKGlrQ9rPb0a/k1kw5mbKITJ:7gdVDuKGdQ9rDrkSw5meIT
TLSH
T1E835CF1272A3C072CF221A710DB9E371576AFC651A724A5BB3F53E1FBA315D00F169A2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

rungame.exe

.exe 1.1MB

rungame.exe

IMPHASH b288276592e6e95167d01db9585fce8e
SHA256 f394dd656183860e307ded6b462e65db348425413e8a2b2fcb096cd86b6b5e78
MD5 a82f41d81b9f18b7531e3f0cd707c327
SHA1 33ab41157ca0891f054856c39d87f391a3b6b001
SHA512 7029aee19d2589bd813d555d07b791e75958d6af3c19e1b6cef2bd3876c7be5ca42ab5c81a8bcfed497f292f4a505055860350633717755a2e50a2d5bfeba30f
SSDEEP 24576:7mRedtMVDuKGlrQ9rPb0a/k1kw5mbKITJ:7gdVDuKGdQ9rDrkSw5meIT
TLSH
T1E835CF1272A3C072CF221A710DB9E371576AFC651A724A5BB3F53E1FBA315D00F169A2
MD5 SHA1 SHA512 SSDEEP TLSH

PE Signature issue

Digest

85:a9:45:6f:31:86:72:75:91:9c:b2:85:ab:ec:5d:6a:42:87:a2:c9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=EasyAntiCheat Oy,O=EasyAntiCheat Oy,L=Helsinki,ST=Uusimaa,C=FI

Chains

Mar 5, 2019

CN=EasyAntiCheat Oy,O=EasyAntiCheat Oy,L=Helsinki,ST=Uusimaa,C=FI

Digest

78:2c:3b:e0:6d:ac:e6:82:a6:4a:9c:0c:14:c0:fe:bb:84:68:9e:4e:e2:b3:41:b1:06:8a:90:e2:de:20:8e:90

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2585063-4,CN=EasyAntiCheat Oy,O=EasyAntiCheat Oy,STREET=Tammasaarenkatu 3,L=Helsinki,ST=Uusimaa,C=FI,1.3.6.1.4.1.311.60.2.1.3=#13024649,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 5, 2019

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:25:07:1d:f9:af

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Nov 18, 2009 - Mar 18, 2019

Subject

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Revocation Status

Not revoked

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

Serial Number

23:41:75:e3:d1:a2:3e:f8:ac:b5:02:45

Issuer

CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 3, 2017 - Oct 3, 2020

Subject

CN=GlobalSign TSA for Advanced - G2

Serial Number

0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 19, 2018 - Mar 18, 2029

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:31:89:c6:50:04

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 2, 2011 - Mar 29, 2029

Subject

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Serial Number

47:c3:0f:fe:fc:22:bb:28:0f:96:fe:a7:52:51

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Revocation Status

Not revoked

Timespan

Mar 16, 2016 - Mar 16, 2024

Subject

CN=EasyAntiCheat Oy,O=EasyAntiCheat Oy,L=Helsinki,ST=Uusimaa,C=FI

Serial Number

04:71:1b:ed:e3:62:19:d3:fd:5d:d1:06

Issuer

CN=GlobalSign CodeSigning CA - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 1, 2017 - Nov 1, 2020

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 24, 2016 - Jun 24, 2027

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 13, 2011 - Jan 28, 2028

Minor OS version

Major OS version

Entry point

106219

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

eac_launcher.pdb

msimg32

GradientFill

shlwapi

PathRemoveFileSpecW

gdiplus

GdipDeleteFont GdipDeleteStringFormat GdipMeasureString GdipCloneBrush GdipGetSolidFillColor GdipStringFormatGetGenericTypographic GdipSetTextRenderingHint GdipCloneStringFormat GdipDrawString GdipFree GdipCreateSolidFill GdipCreateFont GdipDisposeImage GdipDrawImageRectI GdipAlloc GdipDeleteBrush GdipCloneImage GdipGetImageHeight GdiplusShutdown GdiplusStartup GdipDeleteGraphics GdipCreateFromHDC GdipGetFamilyName GdipPrivateAddMemoryFont GdipDeletePrivateFontCollection GdipCloneFontFamily GdipNewPrivateFontCollection GdipGetFontCollectionFamilyCount GdipGetFontCollectionFamilyList GdipDeleteFontFamily GdipLoadImageFromStream GdipGetImageWidth GdipSetStringFormatAlign

gdi32

AddFontMemResourceEx RemoveFontMemResourceEx CreateCompatibleBitmap CreateCompatibleDC DeleteDC SelectObject CreateFontW GetStockObject GetDeviceCaps SetTextColor SetBkMode SetDCBrushColor DeleteObject CreateSolidBrush RoundRect SetDCPenColor

ole32

CreateStreamOnHGlobal

kernel32

FlushFileBuffers GetProcessHeap GetStringTypeW GetFileType SetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale LCMapStringW GetConsoleCP GetTimeFormatW GetDateFormatW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileA GetConsoleMode HeapReAlloc ReadConsoleW SetFilePointerEx HeapSize WriteConsoleW DecodePointer QueryPerformanceFrequency CreateEventW SwitchToThread SetEvent ResetEvent GetTimeZoneInformation CompareStringW FindFirstFileExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW CreateDirectoryW GetCommandLineW GetModuleFileNameW WaitForSingleObject GetLastError GlobalAlloc GlobalFree CloseHandle LoadLibraryW GetProcAddress GlobalLock FreeLibrary GlobalUnlock GetExitCodeProcess GetLocaleInfoW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection ReadFile FindFirstFileW GetFileSizeEx FindNextFileW FindClose CreateFileW GetFileAttributesW SizeofResource LockResource LoadResource FindResourceW SetEndOfFile MultiByteToWideChar WideCharToMultiByte RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameA ExitProcess GetModuleHandleExW GetACP WaitForSingleObjectEx HeapAlloc HeapFree

user32

GetMessageW DefWindowProcW PostMessageW GetWindowRect GetDC SetWindowPos FillRect CreateWindowExW SendMessageW GetSystemMetrics RegisterClassExW ShowWindow DispatchMessageW SetTimer GetWindowLongW MoveWindow SetLayeredWindowAttributes BringWindowToTop TranslateMessage LoadIconW LoadCursorW SetCapture SetWindowLongW UpdateLayeredWindow DrawTextW KillTimer PostQuitMessage SystemParametersInfoW UpdateWindow ReleaseCapture ReleaseDC BeginPaint RedrawWindow MessageBoxW GetWindowTextW EndPaint

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

rungame.exe

PE Signature issue

msimg32

shlwapi

gdiplus

gdi32

ole32

kernel32

user32

generic