2025-04-08_cd553ce7a31bac1a44b761dd831b1089_black-basta_hijackloader_luca-stealer | Triage

Sharing

General

Target

2025-04-08_cd553ce7a31bac1a44b761dd831b1089_black-basta_hijackloader_luca-stealer
Size

5.7MB
MD5

cd553ce7a31bac1a44b761dd831b1089
SHA1

a54f6d76cc6576e661ac793b085aa2da04f57349
SHA256

a808f1f3c67e9ce64442115e902b375f4b30628359460a284d05ab2d0fdbcea9
SHA512

00a85f996c40fd76bef66b0678a1572e993991267aa44bf80359a9a264b97c22943ca5f4d1adfbc55f0d634185de97ccbbde1a6f4551694f6e56461a08db7cca
SSDEEP

98304:kWl27OuKr+gvhf2U9Nzm31PMoslkqXf0FvUcwti78OqJ7TPBvc8X6UczF:ktOuK6mn9NzgMoYkSIvUcwti7TQlvcik

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-04-08_cd553ce7a31bac1a44b761dd831b1089_black-basta_hijackloader_luca-stealer

Files

2025-04-08_cd553ce7a31bac1a44b761dd831b1089_black-basta_hijackloader_luca-stealer
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\attat\source\repos\DotStealer-Builder (1.8)\DotStealer\DotStealer\obj\Release\net462\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ