f:\jnks\workspace\PSDr_Test_and_Prod\HPPSDr_878\Release\FileExtractor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2025-05-14_a1d0ba147423292206f74e6e69d8272a_black-basta_darkgate_elex_luca-stealer_mespinoza.exe
Resource
win10v2004-20250502-en
General
-
Target
2025-05-14_a1d0ba147423292206f74e6e69d8272a_black-basta_darkgate_elex_luca-stealer_mespinoza
-
Size
2.1MB
-
MD5
a1d0ba147423292206f74e6e69d8272a
-
SHA1
047289d7690ed9a1937a7eb30ec3529a9684c0d3
-
SHA256
89b7b060048934570d3352b2620d48243143352d7d44f9b1a1ee5b50f192c2b9
-
SHA512
3be6a95769262572fbd344749319f37d8bed82f7836ecd19ad5d3ea469b52fe8fff1689954905771c848bbdab31e2096aea3c1c9004ca0ba0eecc4b84576d059
-
SSDEEP
49152:SsCkh7S1HMBX6PC+Nn6JxMdDyzlp0+Y21AcH9v4BAdjGBQc3C:SAh7S1HM5t+VTuzle+YaH14BAdC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-05-14_a1d0ba147423292206f74e6e69d8272a_black-basta_darkgate_elex_luca-stealer_mespinoza
Files
-
2025-05-14_a1d0ba147423292206f74e6e69d8272a_black-basta_darkgate_elex_luca-stealer_mespinoza.exe windows:5 windows x86 arch:x86
c4164722bec1944f65465e500a0ef9a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FileTimeToSystemTime
lstrcmpW
GlobalGetAtomNameW
lstrcmpA
LoadLibraryW
GetModuleHandleA
OutputDebugStringA
SetLastError
FormatMessageW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
WideCharToMultiByte
MultiByteToWideChar
GlobalAddAtomW
FlushFileBuffers
GetFullPathNameW
GetFileSize
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
GetCurrentProcess
LoadLibraryExW
lstrcmpiW
EncodePointer
GetSystemDirectoryW
CompareStringW
GetLocaleInfoW
GetUserDefaultUILanguage
SetEvent
CreateEventW
GetCurrentThreadId
SetThreadPriority
ResumeThread
FreeResource
GlobalDeleteAtom
GlobalFindAtomW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
VirtualProtect
lstrcpyW
FindResourceExW
GetFileAttributesW
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
GetTickCount
GetProfileIntW
SearchPathW
GetUserDefaultLCID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
LCMapStringW
GetStringTypeW
GetCPInfo
RtlUnwind
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
HeapQueryInformation
GetCommandLineA
GetCommandLineW
GetSystemInfo
VirtualAlloc
VirtualQuery
QueryPerformanceFrequency
SetStdHandle
GetFileType
GetStdHandle
ExitProcess
GetACP
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
GetLongPathNameW
GetCurrentDirectoryW
lstrcatW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
Sleep
CopyFileW
FindNextFileW
GetCurrentProcessId
FreeLibrary
GetProcAddress
LoadLibraryA
OpenProcess
WriteFile
CloseHandle
CreateFileW
DeleteFileW
lstrlenW
GetLastError
CreateMutexW
GetTempPathW
GetModuleHandleW
GetVersionExW
GetPrivateProfileStringW
GetUserDefaultLangID
WaitForSingleObject
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
LocalAlloc
LocalFree
FindClose
FindFirstFileW
WriteConsoleW
psapi
GetModuleFileNameExW
EnumProcessModules
wintrust
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
crypt32
CertGetNameStringW
user32
BringWindowToTop
SetCursorPos
CopyIcon
ReleaseCapture
WindowFromPoint
DrawFocusRect
MessageBoxW
GetMessageW
SetCapture
GetNextDlgGroupItem
IsRectEmpty
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
CopyImage
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
IsZoomed
TrackMouseEvent
GetSystemMenu
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
LoadImageW
RegisterClassExW
CreateWindowExW
InvalidateRect
ShowWindow
UpdateWindow
PostQuitMessage
DefWindowProcW
SendMessageW
GetWindowRect
ScreenToClient
SetWindowTextW
GetDesktopWindow
GetSystemMetrics
MoveWindow
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
GetWindowTextW
GetWindowTextLengthW
UnhookWindowsHookEx
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
EnableWindow
IsWindowEnabled
GetWindowLongW
GetParent
GetWindowThreadProcessId
GetLastActivePopup
SetFocus
SetScrollPos
GetScrollPos
GetWindow
IsWindow
SetWindowPos
GetDlgItem
CheckDlgButton
GetDlgCtrlID
GetFocus
SetWindowLongW
IsDialogMessageW
ClientToScreen
PtInRect
GetClassNameW
RealChildWindowFromPoint
DestroyIcon
CharUpperW
PeekMessageW
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
FillRect
RegisterWindowMessageW
GetMessagePos
GetMessageTime
PostMessageW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
IsMenu
IsChild
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsIconic
GetCapture
GetMenu
SetMenu
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
GetWindowRgn
DestroyCursor
RedrawWindow
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
GetClientRect
AdjustWindowRectEx
MapWindowPoints
CopyRect
EqualRect
GetClassLongW
GetTopWindow
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
GetMonitorInfoW
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
IntersectRect
InflateRect
gdi32
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
SetLayout
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
GetWindowExtEx
GetLayout
BitBlt
DeleteObject
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetObjectW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
SetPolyFillMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SetROP2
SetTextColor
SetTextAlign
CreateRectRgnIndirect
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteExW
ShellExecuteW
ord165
SHGetFolderPathW
SHGetFileInfoW
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
shlwapi
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathStripPathW
PathFindFileNameW
PathIsUNCW
StrFormatKBSizeW
PathStripToRootW
PathFindExtensionW
uxtheme
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize
ole32
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitialize
oleaut32
LoadTypeLi
VarBstrFromDate
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysFreeString
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
wininet
InternetCrackUrlW
InternetReadFile
InternetGetConnectedState
InternetCheckConnectionW
InternetOpenW
InternetGetLastResponseInfoW
InternetConnectW
FtpOpenFileW
FtpGetFileSize
InternetCloseHandle
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
gdiplus
GdipGetImagePixelFormat
GdiplusStartup
GdipFree
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipGetImagePaletteSize
GdipCloneImage
GdipDisposeImage
GdipAlloc
GdipGetImagePalette
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipCreateBitmapFromStream
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 375KB - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.zero Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ