PyInit__websocket
Behavioral task
behavioral1
Sample
56e948e80bb352e71b61dd4115667a8b831073f86934ed7253261f298e944e9a.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
56e948e80bb352e71b61dd4115667a8b831073f86934ed7253261f298e944e9a.dll
Resource
win10v2004-20231020-en
General
-
Target
56e948e80bb352e71b61dd4115667a8b831073f86934ed7253261f298e944e9a
-
Size
15KB
-
MD5
775b0eea588b05fb64045608a214631a
-
SHA1
ef790e4e17d2e48ac3890def2247f0b600a58014
-
SHA256
56e948e80bb352e71b61dd4115667a8b831073f86934ed7253261f298e944e9a
-
SHA512
7d95eb9a6add833e9078aa7dc3aaf3db1bf40013afa2a256206f7066f7e52ba5709b514d123decff82117ee4561bb14ba5fb7c08c2a128463afc02f4e4e6a7d8
-
SSDEEP
384:4BGT5aZZuYMxOO4U2zW3isOPoAydZa7gJXEW:4cT54ZuYM026aIoAIp0
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56e948e80bb352e71b61dd4115667a8b831073f86934ed7253261f298e944e9a
Files
-
56e948e80bb352e71b61dd4115667a8b831073f86934ed7253261f298e944e9a.dll windows:6 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE