PY8[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PY8.dll
Size 432KB
Sample220401-kpavgaddhm
SHA256 5df779fe3afd156a3ecd32ef3de025d86105db4ebf061f818082e2e805f4e5b5
MD5 1cf2523001cb7d84a3ba9f9cf7bc5956
SHA1 858c8b4cda5f4ec72d7875bccee257cf0b63799f
SHA512 37ca8886d5b7f8188170b0e1ddc767eec40ba203a2fc94672fd89032cba642ae7b369078eaa31839249278a7c617a73604149ed65f9a99332bc4b158fe22c01f
SSDEEP 6144:fXsg4N8g8NZrrED8R+7pARpzKDAS4rsjW+5YFYQ8Gv0JW84gCFff:f8g4N8RM8R+7pYpzKYrsjW+5MDvT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

PY8.dll

.dll 432KB

PY8.dll

IMPHASH a1307a412c459cd4896a70dba2051692
SHA256 5df779fe3afd156a3ecd32ef3de025d86105db4ebf061f818082e2e805f4e5b5
MD5 1cf2523001cb7d84a3ba9f9cf7bc5956
SHA1 858c8b4cda5f4ec72d7875bccee257cf0b63799f
SHA512 37ca8886d5b7f8188170b0e1ddc767eec40ba203a2fc94672fd89032cba642ae7b369078eaa31839249278a7c617a73604149ed65f9a99332bc4b158fe22c01f
SSDEEP 6144:fXsg4N8g8NZrrED8R+7pARpzKDAS4rsjW+5YFYQ8Gv0JW84gCFff:f8g4N8RM8R+7pYpzKYrsjW+5MDvT
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

56258

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

TerminateProcess RaiseException HeapReAlloc HeapSize GetACP GetTimeZoneInformation LCMapStringA LCMapStringW Sleep HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetCommandLineA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetUnhandledExceptionFilter GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr SetStdHandle CompareStringA CompareStringW SetEnvironmentVariableA HeapAlloc GetProfileStringA InterlockedExchange HeapFree RtlUnwind FormatMessageA GetFileTime GetFileSize GetFileAttributesA GetTickCount FileTimeToLocalFileTime FileTimeToSystemTime GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetOEMCP GetCPInfo GetThreadLocale SizeofResource GetProcessVersion GetLastError WritePrivateProfileStringA GlobalFlags lstrcpynA TlsGetValue LocalReAlloc TlsSetValue EnterCriticalSection GlobalReAlloc LeaveCriticalSection TlsFree GlobalHandle DeleteCriticalSection TlsAlloc InitializeCriticalSection LocalFree LocalAlloc MultiByteToWideChar WideCharToMultiByte lstrlenA InterlockedIncrement InterlockedDecrement LoadLibraryA FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA lstrcpyA MulDiv GetModuleHandleA GetProcAddress SetLastError GlobalUnlock GlobalFree LockResource FindResourceA LoadResource CloseHandle GetModuleFileNameA GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA lstrcmpiA GetCurrentThread GetCurrentThreadId FreeEnvironmentStringsA ExitProcess

user32

MessageBeep InvalidateRect CharUpperA InflateRect RegisterClipboardFormatA PostThreadMessageA GetTopWindow IsChild GetCapture WinHelpA wsprintfA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID GetWindowTextLengthA GetWindowTextA GetDlgCtrlID DefWindowProcA CreateWindowExA GetClassLongA SetPropA UnhookWindowsHookEx GetPropA CallWindowProcA RemovePropA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow SetWindowLongA RegisterWindowMessageA OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetNextDlgGroupItem GrayStringA TabbedTextOutA EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen ScreenToClient MapDialogRect SetWindowPos GetWindow SetWindowContextHelpId EndDialog SetActiveWindow IsWindow CreateDialogIndirectParamA GetDlgItem GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem GetMessageA TranslateMessage DispatchMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible PeekMessageA GetCursorPos SetWindowsHookExA EnableWindow HideCaret ShowCaret ExcludeUpdateRgn DrawFocusRect DefDlgProcA IsWindowUnicode LoadIconA GetParent GetLastActivePopup IsWindowEnabled GetWindowLongA MessageBoxA SetCursor PostQuitMessage PostMessageA IsIconic GetSystemMetrics GetClientRect DrawIcon SetRect CopyAcceleratorTableA CharNextA GetWindowRect GetSysColorBrush GetSystemMenu AppendMenuA SendMessageA PtInRect GetClassNameA GetDesktopWindow LoadCursorA DestroyMenu LoadStringA ShowWindow MoveWindow SetWindowTextA IsDialogMessageA UpdateWindow SendDlgItemMessageA MapWindowPoints GetSysColor SetFocus DestroyWindow DrawTextA CopyRect AdjustWindowRectEx

gdi32

SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx GetClipBox IntersectClipRect DeleteObject SetMapMode GetDeviceCaps GetViewportExtEx GetWindowExtEx CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape GetObjectA BitBlt CreateCompatibleDC GetTextColor GetBkColor DPtoLP LPtoDP GetMapMode PatBlt SetTextColor SetBkMode SetBkColor GetStockObject SelectObject RestoreDC SaveDC DeleteDC CreateDIBitmap GetTextExtentPointA CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegCloseKey RegSetValueExA RegOpenKeyExA RegCreateKeyExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries OleInitialize CoTaskMemAlloc CoTaskMemFree CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoRegisterMessageFilter CoRevokeClassObject OleFlushClipboard OleIsCurrentClipboard OleUninitialize

olepro32

ord253

oleaut32

SysAllocStringLen VariantClear VariantTimeToSystemTime VariantCopy VariantChangeType SysAllocString SysAllocStringByteLen SysStringLen SysFreeString