C:\Work\VSRevo\Windows\Projects\VSProjectPro\build\x86\Release\VSProjectPro\VSProjectPro.pdb
Static task
static1
General
-
Target
2025-04-04_61a4806f814d71db10ab47d197f0c6e3_black-basta_hijackloader_luca-stealer_remcos
-
Size
21.2MB
-
MD5
61a4806f814d71db10ab47d197f0c6e3
-
SHA1
25f209c16327d8855e66df77f75229537a9ed3b0
-
SHA256
dc1712f9b470acc377bc78b5a31674cb18278d23032f8e498b99c97f0194a532
-
SHA512
8cbfcfc1cc7e4590bc9ca501dc833a101232b04a1748a9e7a10b37e8aa237082d6f05a1ae253d01ebea0a08353276253c1f4c625fde7fca1e7460bf5b34eba2f
-
SSDEEP
196608:1XMo3++tr2ZI97ai4pNEm6IUDguV9NA+WZfXvuPTxhbmWqPWpyR1pOIIIIIIIIIb:ZEZIIi4b2jgqFhlqPWpyR1pV1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-04_61a4806f814d71db10ab47d197f0c6e3_black-basta_hijackloader_luca-stealer_remcos
Files
-
2025-04-04_61a4806f814d71db10ab47d197f0c6e3_black-basta_hijackloader_luca-stealer_remcos.exe windows:6 windows x86 arch:x86
75d1a263d7dfb3d1081da8c1b639813e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
dnsapi
DnsQuery_W
shlwapi
PathFindFileNameW
PathAppendW
PathFindExtensionW
StrStrIW
StrCmpNIW
StrFormatByteSizeW
StrCatW
PathRemoveBackslashW
PathStripPathW
PathRemoveFileSpecW
StrCpyW
PathFileExistsW
StrToIntA
ord487
PathQuoteSpacesW
PathAddBackslashW
StrChrIW
PathUnquoteSpacesW
StrCmpW
StrFormatKBSizeW
PathIsRootW
PathGetArgsW
PathRemoveArgsW
SHDeleteValueW
SHDeleteKeyW
PathStripToRootW
StrToIntW
PathMatchSpecW
PathRemoveExtensionW
StrStrW
PathIsDirectoryW
PathIsDirectoryEmptyW
PathUnExpandEnvStringsW
SHQueryValueExW
StrCmpIW
PathIsUNCW
ord29
psapi
EnumProcesses
GetModuleFileNameExW
GetProcessImageFileNameW
msi
ord217
ord173
advapi32
RegDeleteKeyW
RegEnumKeyW
RegUnLoadKeyW
RegOpenKeyExA
RegQueryValueW
RegNotifyChangeKeyValue
GetTokenInformation
AdjustTokenPrivileges
LookupPrivilegeValueW
SetSecurityInfo
SetEntriesInAclW
ControlService
GetUserNameW
DuplicateTokenEx
OpenProcessToken
CreateProcessWithTokenW
RegSetValueExW
RegSaveKeyExW
FreeSid
SetNamedSecurityInfoW
AllocateAndInitializeSid
ConvertSidToStringSidW
LookupAccountNameW
RegSetKeySecurity
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegLoadKeyW
RegGetKeySecurity
RegFlushKey
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenSCManagerW
OpenServiceW
CloseServiceHandle
DeleteService
RegOpenKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
RegConnectRegistryW
wininet
FindFirstUrlCacheEntryW
DeleteUrlCacheEntryW
FindCloseUrlCache
FindNextUrlCacheEntryW
wtsapi32
WTSFreeMemory
WTSEnumerateProcessesW
WTSQuerySessionInformationW
kernel32
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
HeapReAlloc
RaiseException
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LockFileEx
GetCurrentProcessId
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
FlushFileBuffers
DecodePointer
VirtualAllocEx
VirtualFreeEx
ReadProcessMemory
WriteProcessMemory
SuspendThread
VirtualAlloc
VirtualFree
GetVersion
GetLongPathNameW
IsWow64Process
FormatMessageW
QueryDosDeviceW
VerSetConditionMask
VerifyVersionInfoW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
ReadConsoleW
GetCommandLineW
GetUserDefaultLangID
AttachConsole
FreeConsole
GetShortPathNameW
GlobalSize
SetLastError
GetModuleHandleA
EncodePointer
GetSystemDirectoryW
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
lstrcmpA
ReleaseSemaphore
GetVolumeInformationW
GetThreadLocale
GetFileSizeEx
GetFileTime
SetThreadPriority
GlobalGetAtomNameW
GetCurrentThread
GetPrivateProfileIntW
TlsFree
GlobalReAlloc
FlushViewOfFile
LocalAlloc
LocalReAlloc
GlobalFlags
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
VirtualProtect
SetErrorMode
GetUserDefaultLCID
GetCurrentDirectoryW
FindResourceExW
GetProfileIntW
SearchPathW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
PeekNamedPipe
GetFileType
GetConsoleCP
GetConsoleMode
VirtualQuery
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
GetCPInfo
LCMapStringW
QueryPerformanceFrequency
GetStringTypeW
CreateHardLinkW
SetFilePointerEx
FindFirstFileExW
GetExitCodeThread
GetPriorityClass
SetPriorityClass
GetThreadPriority
IsBadWritePtr
IsBadReadPtr
GetVersionExA
GetCurrencyFormatW
GetNumberFormatW
GetTimeFormatW
GetDateFormatW
WinExec
GetTempPathA
HeapSize
HeapValidate
UnmapViewOfFile
CreateMutexW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
InitializeCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
HeapFree
HeapCreate
TryEnterCriticalSection
OutputDebugStringW
GetFileAttributesA
GetDiskFreeSpaceA
GlobalHandle
ReadFile
AreFileApisANSI
GetUserDefaultLocaleName
GetComputerNameW
CreateEventW
ExitProcess
DuplicateHandle
LocalFree
GetCurrentProcess
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
WritePrivateProfileStringW
CreateFileA
GetModuleFileNameW
GetEnvironmentVariableW
GetLocalTime
GetSystemInfo
CreateThread
TerminateThread
GetProcessId
TerminateProcess
GetExitCodeProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
EnumResourceNamesW
LoadLibraryExW
FreeResource
lstrcmpiW
GetVersionExW
CompareFileTime
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceExW
DeviceIoControl
GetUserDefaultUILanguage
GetDriveTypeW
GetLogicalDrives
InitializeCriticalSectionAndSpinCount
FileTimeToDosDateTime
GetFileInformationByHandle
GetFileSize
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
TlsGetValue
TlsSetValue
GetCurrentThreadId
GetTickCount
CreateFileW
GetFileAttributesW
lstrcpynW
lstrlenW
GetTempFileNameW
GetTempPathW
WriteConsoleInputW
GetStdHandle
GetModuleHandleW
TlsAlloc
GetFileAttributesExW
FileTimeToLocalFileTime
WideCharToMultiByte
SetFileAttributesW
RemoveDirectoryW
WriteFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextChangeNotification
FindCloseChangeNotification
FindFirstChangeNotificationW
WaitForMultipleObjects
OpenProcess
CopyFileW
CloseHandle
CreateProcessW
MoveFileW
lstrcatW
ExpandEnvironmentStringsW
GetWindowsDirectoryW
lstrcmpW
lstrcpyW
ResumeThread
GetFullPathNameW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx
DeleteFileW
GetLastError
CreateDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
Sleep
FindClose
FindNextFileW
FindFirstFileW
MoveFileExW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
SetEvent
WaitForSingleObject
ResetEvent
MulDiv
GetCommandLineA
HeapQueryInformation
GetACP
SetEnvironmentVariableA
SetEnvironmentVariableW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
WriteConsoleW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
GetLogicalDriveStringsW
user32
IsIconic
SetLayeredWindowAttributes
EnumChildWindows
FindWindowW
DrawEdge
GetWindowDC
SetForegroundWindow
GetForegroundWindow
SystemParametersInfoW
SetWindowRgn
UnregisterClassW
DrawFrameControl
FrameRect
IsZoomed
GetActiveWindow
FillRect
ModifyMenuW
MessageBoxA
DispatchMessageW
TranslateMessage
WaitMessage
PeekMessageW
LockWindowUpdate
DestroyMenu
LoadStringW
DrawFocusRect
EnumWindows
GetWindowThreadProcessId
CloseClipboard
EmptyClipboard
OpenClipboard
ChangeWindowMessageFilter
SetCaretPos
ShowScrollBar
GetScrollPos
GetScrollRange
SetScrollPos
SetScrollRange
GetDesktopWindow
GetClassNameW
IsCharAlphaW
AnimateWindow
LoadMenuW
SetRect
DrawIcon
LoadIconW
GetIconInfo
SetWindowLongW
IsWindowVisible
WindowFromPoint
GetMonitorInfoW
MonitorFromWindow
ReleaseDC
GetDC
GetMessagePos
EqualRect
InflateRect
GetCaretPos
RemovePropW
AdjustWindowRectEx
MessageBoxW
SetCapture
GetClassLongW
GetTopWindow
GetLastActivePopup
SetWindowsHookExW
ReleaseCapture
CreatePopupMenu
InsertMenuW
TrackPopupMenu
SetCursorPos
EnableMenuItem
GetMenuItemCount
GetMenuItemID
GetSubMenu
MsgWaitForMultipleObjects
IsWindowUnicode
GetMessageW
GetMessageA
DispatchMessageA
SetClipboardData
GetDoubleClickTime
SendDlgItemMessageA
GetMenuStringW
GetMenuState
AppendMenuW
RemoveMenu
MoveWindow
RegisterHotKey
UnregisterHotKey
DestroyCaret
ShowCaret
CreateCaret
LoadBitmapW
GetSysColorBrush
SetPropW
CallNextHookEx
SetScrollInfo
WinHelpW
CheckMenuItem
SetDlgItemTextW
CheckDlgButton
SendDlgItemMessageW
GetDlgCtrlID
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetWindow
IsCharAlphaNumericW
GetClipboardData
SystemParametersInfoA
CreateIconIndirect
LoadMenuIndirectW
IsDialogMessageW
UnhookWindowsHookEx
BeginPaint
EndPaint
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
SetActiveWindow
RegisterWindowMessageW
GetMessageTime
CallWindowProcW
RegisterClassW
GetClassInfoExW
IsMenu
GetWindowPlacement
SetWindowPlacement
MapDialogRect
GetKeyState
GetCapture
GetMenu
SetMenu
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetMenuItemInfoW
GetSysColor
LoadImageW
DestroyIcon
GetDlgItem
IsWindow
GetWindowRect
GetClientRect
IsChild
InvalidateRect
UpdateWindow
EnableWindow
SetTimer
GetFocus
GetSystemMetrics
GetWindowLongW
GetSystemMenu
LoadCursorW
DefWindowProcW
GetClassInfoW
EndDeferWindowPos
DeferWindowPos
ScreenToClient
BeginDeferWindowPos
GetScrollInfo
GetParent
ClientToScreen
SendMessageW
ShowWindow
KillTimer
RedrawWindow
SetWindowPos
IsWindowEnabled
CopyRect
SetCursor
LoadAcceleratorsW
PostMessageW
MapWindowPoints
ScrollWindow
IntersectRect
MsgWaitForMultipleObjectsEx
GetWindowRgn
CreateWindowExW
WindowFromDC
TranslateAcceleratorW
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
CharUpperBuffW
MapVirtualKeyExW
IsCharLowerW
GetComboBoxInfo
UpdateLayeredWindow
SetMenuDefaultItem
MonitorFromPoint
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyIcon
SetClassLongW
GetMenuDefaultItem
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetNextDlgGroupItem
PostThreadMessageW
MessageBeep
IsClipboardFormatAvailable
GetDCEx
CopyAcceleratorTableW
InvalidateRgn
CreateMenu
GetTabbedTextExtentW
DrawIconEx
EnumDisplayMonitors
UnionRect
RealChildWindowFromPoint
ShowOwnedPopups
CharUpperW
SetWindowContextHelpId
RegisterClipboardFormatW
PostQuitMessage
wsprintfW
GetAsyncKeyState
OffsetRect
IsRectEmpty
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetRectEmpty
SetFocus
DestroyCursor
DeleteMenu
CharNextW
GetCursorPos
PtInRect
DrawStateW
TrackMouseEvent
SetParent
CopyImage
MapVirtualKeyW
GetKeyNameTextW
GetCursor
GetPropW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
BringWindowToTop
gdi32
SetTextColor
RoundRect
GetStockObject
CreatePen
GetTextExtentPoint32W
CreateSolidBrush
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
LPtoDP
CreateBitmap
GetMapMode
DPtoLP
GetBkColor
GetTextColor
SetBkColor
MoveToEx
LineTo
Rectangle
GetStretchBltMode
SetStretchBltMode
CreateRectRgn
CombineRgn
GetDIBits
CopyMetaFileW
CreateDCW
CreateHatchBrush
CreatePatternBrush
ExcludeClipRect
GetClipBox
BitBlt
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
StartDocW
ExtCreatePen
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
SetRectRgn
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
GetCharWidthW
StretchDIBits
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
GetTextAlign
GetViewportOrgEx
OffsetRgn
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateRoundRectRgn
EnumFontFamiliesExW
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
SetPixelV
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetTextFaceW
CreateCompatibleBitmap
StretchBlt
PatBlt
CreateFontIndirectW
GetDeviceCaps
GetTextMetricsW
GetObjectW
SetDIBColorTable
SelectObject
DeleteObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
GetDCOrgEx
GetMetaFileW
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileW
PlayEnhMetaFile
GetTextCharset
CreateEllipticRgnIndirect
GetCurrentPositionEx
CreateFontW
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
shell32
ord92
SHCreateItemFromParsingName
SHGetFolderPathW
ExtractIconW
SHGetFileInfoW
ShellExecuteW
ShellExecuteExW
SHGetKnownFolderPath
ExtractIconExW
ord165
DragAcceptFiles
DragQueryFileW
DragFinish
SHAddToRecentDocs
SHEmptyRecycleBinW
ord6
Shell_NotifyIconW
SHGetMalloc
CommandLineToArgvW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHAppBarMessage
SHFileOperationW
comctl32
ord17
_TrackMouseEvent
ImageList_SetImageCount
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Remove
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Duplicate
ImageList_GetImageInfo
uxtheme
GetThemePartSize
OpenThemeData
CloseThemeData
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
DrawThemeText
GetThemeColor
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
ole32
IsAccelerator
OleTranslateAccelerator
OleLockRunning
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleFlushClipboard
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoGetClassObject
OleDestroyMenuDescriptor
WriteClassStm
OleIsCurrentClipboard
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
OleLoadFromStream
StgCreateDocfileOnILockBytes
CoDisconnectObject
OleUninitialize
OleInitialize
CoCreateGuid
OleSaveToStream
CLSIDFromProgID
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CreateStreamOnHGlobal
CoTaskMemFree
OleRun
CLSIDFromString
CoInitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
RevokeDragDrop
CoFreeUnusedLibraries
oleaut32
VarMul
OleCreatePictureIndirect
LoadTypeLi
VarCyFromStr
VarI4FromStr
SafeArrayDestroy
OleCreateFontIndirect
SysStringLen
VariantChangeType
SysAllocStringLen
OleLoadPicture
VarDateFromStr
VariantInit
VariantCopy
SysAllocString
VariantClear
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VarDiv
VarBstrFromR8
VarR8FromStr
CreateErrorInfo
GetErrorInfo
oledlg
OleUIBusyW
urlmon
URLDownloadToFileW
gdiplus
GdipFree
GdipAlloc
GdipDisposeImage
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
rstrtmgr
RmEndSession
RmStartSession
wintrust
WinVerifyTrust
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
rpcrt4
UuidToStringW
UuidCreate
RpcStringFreeW
Sections
.text Size: 7.1MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 309KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12.1MB - Virtual size: 12.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE