D:\bs\main\Out\Win32\Release\starter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2025-04-13_138805dcde04f82f4298d1a3ec248328_black-basta_elex_luca-stealer.exe
Resource
win10v2004-20250314-en
General
-
Target
2025-04-13_138805dcde04f82f4298d1a3ec248328_black-basta_elex_luca-stealer
-
Size
2.4MB
-
MD5
138805dcde04f82f4298d1a3ec248328
-
SHA1
12a1c6024852fca44f5bb8164d569b5440709e90
-
SHA256
01d3b793a25669ece3a6e4fa84ead0b4562f332102718edcc6fc211a25d19521
-
SHA512
1cbbffb89a98190fe74720648e05de4a7c8605d5ef668b0efa8b76afc1caa27cb9dfbea46ce3faf1e345014b6453835824dc45c76179984ebb7504a3638c3701
-
SSDEEP
49152:Kbv8a9HnIk8MC9Ohy0OiiRFp/PpScjZ3x/uO5Ktd:wvtHnIs7qPp3IcjP/uH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-04-13_138805dcde04f82f4298d1a3ec248328_black-basta_elex_luca-stealer
Files
-
2025-04-13_138805dcde04f82f4298d1a3ec248328_black-basta_elex_luca-stealer.exe windows:5 windows x86 arch:x86
85cdb68958d0ef110551ad0f568cef82
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
ResetEvent
DeleteCriticalSection
GetModuleFileNameW
CreateFileW
GetCurrentThreadId
GetSystemDirectoryW
OpenProcess
GetLastError
GetLocalTime
GetProcAddress
GetCurrentProcessId
CreateProcessW
LoadLibraryExW
SetUnhandledExceptionFilter
LocalAlloc
DeleteFileW
RemoveDirectoryW
ReadFile
FormatMessageW
ExpandEnvironmentStringsW
GetModuleHandleW
GetTempPathW
GetFileAttributesW
CreateDirectoryW
SetCurrentDirectoryW
FreeLibrary
HeapFree
GetProcessHeap
MultiByteToWideChar
GetSystemWow64DirectoryW
GetModuleHandleA
GetCurrentProcess
GetCurrentDirectoryW
MoveFileW
HeapAlloc
CompareStringW
LoadLibraryW
SetLastError
TlsSetValue
VirtualProtect
VirtualAlloc
TlsAlloc
GetVersionExA
GetSystemInfo
FlushInstructionCache
TlsGetValue
TlsFree
GetTickCount
VirtualQuery
RaiseException
LoadLibraryExA
FindResourceExW
LoadResource
LockResource
SizeofResource
WriteFile
SetFilePointer
FindNextFileW
FindClose
MoveFileExW
GetTempFileNameW
WideCharToMultiByte
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
HeapReAlloc
GetStdHandle
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
WriteConsoleW
Sections
.text Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.zero Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ