start
Static task
static1
Behavioral task
behavioral1
Sample
rund1132_dump.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
rund1132_dump.dll
Resource
win10v2004-20230915-en
General
-
Target
rund1132_dump.dll
-
Size
91KB
-
MD5
52322ea19c5ca4b384769f40cce8f7c6
-
SHA1
72260c22dd40790c2f8f3aeb7a17a62cafb773da
-
SHA256
01e7ba4b23b94269f16bef68f685950b8e036ae0f79aad335123de53e3e43057
-
SHA512
1b774b70b9a31bf3422298633e1c90da2962551ff123d26ab8b10dd8e956983850fbf873de36500978ec798d06b55c224c1dce50b109fa6630b7cb9bcbed4546
-
SSDEEP
1536:sxh3x3j1IfceNJwqqWRy/1fXbHk4GJ/bhEWChkYEdwIlBSXsUOubPKtsWnY:ep9wOqqw61fXbEvgkYEpyN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rund1132_dump.dll
Files
-
rund1132_dump.dll.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ