E:\project\sogouime\develop\Bin\SogouPdb\SogouInput\SGDownload.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2025-05-14_61f77153770f11c181d2a907bdc4e153_black-basta_darkgate_elex_luca-stealer.exe
Resource
win10v2004-20250502-en
General
-
Target
2025-05-14_61f77153770f11c181d2a907bdc4e153_black-basta_darkgate_elex_luca-stealer
-
Size
443KB
-
MD5
61f77153770f11c181d2a907bdc4e153
-
SHA1
0e7b00af1f5adfa7cac9ac76025bd61687f9b24a
-
SHA256
bcd8b07c8ca0e1c6636b74030d072f9d5fb091407b70f40edfdb4315ab901ccd
-
SHA512
baa3a015cdefdd93056def58e44f5f34505e89abea301c090f85ccf290bd83562bc2d3791ede3d07dc6e057f93c3a03810b7fd3cd6841d5c5b1c367deff8a5e8
-
SSDEEP
6144:EXIuqrFfrKvnvND7+6aSd1mlhK/TvEDmD8kJN5C7Hs51tjFb7lSb7y:kHvnvND7KN+TvEDE8y5VPtjFKy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-05-14_61f77153770f11c181d2a907bdc4e153_black-basta_darkgate_elex_luca-stealer
Files
-
2025-05-14_61f77153770f11c181d2a907bdc4e153_black-basta_darkgate_elex_luca-stealer.exe windows:5 windows x86 arch:x86
282a342ebc8fee2ece05222a9c8c9381
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetReadFile
HttpQueryInfoW
HttpSendRequestExW
HttpEndRequestW
InternetOpenW
InternetOpenUrlW
InternetSetOptionW
InternetConnectW
InternetWriteFile
InternetQueryOptionW
HttpOpenRequestW
InternetCloseHandle
HttpAddRequestHeadersW
shlwapi
PathFileExistsW
kernel32
SetUnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
WriteFile
SetFilePointer
GetLocalTime
FormatMessageW
lstrcpyW
lstrcatW
lstrlenW
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
CreateProcessW
GetCurrentProcessId
CreateFileW
InitializeCriticalSection
InterlockedCompareExchange
GetLastError
GetOverlappedResult
EnterCriticalSection
LeaveCriticalSection
SetEvent
ConnectNamedPipe
DisconnectNamedPipe
WaitForMultipleObjectsEx
ReadFileEx
WriteFileEx
CreateEventW
CreateNamedPipeW
DeleteFileW
InterlockedIncrement
InterlockedDecrement
HeapAlloc
HeapFree
GetProcessHeap
ResumeThread
GetFileSize
SetEndOfFile
SetFileAttributesW
MapViewOfFile
UnmapViewOfFile
OpenFileMappingW
GetFileAttributesW
CopyFileW
GetVersionExW
CreateFileMappingW
SetLastError
OpenEventW
GetCurrentProcess
VirtualQuery
GetProcAddress
WideCharToMultiByte
GetTickCount
CloseHandle
Sleep
WaitForMultipleObjects
WaitForSingleObject
DeleteCriticalSection
OutputDebugStringW
WriteConsoleW
GetConsoleCP
HeapSize
ReadFile
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
FindNextFileW
FindClose
GetSystemDirectoryW
FreeLibrary
CreateDirectoryW
ExitThread
CreateThread
LocalFree
CreateMutexW
ReleaseMutex
OpenMutexW
LocalAlloc
QueryPerformanceCounter
RaiseException
DecodePointer
GetCommandLineW
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
FreeLibraryAndExitThread
GetModuleHandleExW
GetFileType
ExitProcess
GetStdHandle
GetACP
LCMapStringW
HeapReAlloc
GetStringTypeW
GetConsoleMode
ReadConsoleW
IsValidCodePage
GetOEMCP
GetCPInfo
SetFilePointerEx
SetStdHandle
FindFirstFileExW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
user32
wsprintfW
MsgWaitForMultipleObjectsEx
PeekMessageW
DispatchMessageW
TranslateMessage
wvsprintfW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
advapi32
SetNamedSecurityInfoW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetSecurityInfo
GetNamedSecurityInfoW
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAceEx
GetLengthSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetFolderPathW
Sections
.text Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.zero Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ