dsa123xsa[.]exe | Triage™

Resubmissions

26/08/2026, 10:39

260826-mp2pasxapg

26/08/2026, 10:37

260826-mn75paxamh9

Sharing

Copy URL Twitter E-mail

General

Target
dsa123xsa.exe
Size 485KB
Sample260826-mp2pasxapg
SHA256 c7a593ae87aca3fb6caf300b6bc1b2e01d70e0a41fb635da781c3dd51f679f51
MD5 34702da3dc337236936bceb95db40db5
SHA1 b90867217e58d253e4c5f4c6540247435c61594d
SHA512 a283aa6b7b2f99ce9d32724ba736ed8dd0bb0e654648f6b070037bacba89a27aa82f21eff0785af3af4aabde08733d9777fda1e16ef9d2574803da8bcc7d4ef7
SSDEEP 6144:qLHTA28BHHzs7HtI4V6CtMtDpXuOJIIRXkrbbrDehZm9yzi+LcI/pJT+RiZws:75BHTF/XTziocoT+R
TLSH
T1BAB43A2552891EE8E07685F4AE967503F572380803719AFB47B49991DFE3290BF7BB03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dsa123xsa.exe

File Explorer

dsa123xsa.exe

.exe 485KB

dsa123xsa.exe

IMPHASH cfa6a6d5c51db2c509c58e8fafdda21f
SHA256 c7a593ae87aca3fb6caf300b6bc1b2e01d70e0a41fb635da781c3dd51f679f51
MD5 34702da3dc337236936bceb95db40db5
SHA1 b90867217e58d253e4c5f4c6540247435c61594d
SHA512 a283aa6b7b2f99ce9d32724ba736ed8dd0bb0e654648f6b070037bacba89a27aa82f21eff0785af3af4aabde08733d9777fda1e16ef9d2574803da8bcc7d4ef7
SSDEEP 6144:qLHTA28BHHzs7HtI4V6CtMtDpXuOJIIRXkrbbrDehZm9yzi+LcI/pJT+RiZws:75BHTF/XTziocoT+R
TLSH
T1BAB43A2552891EE8E07685F4AE967503F572380803719AFB47B49991DFE3290BF7BB03
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

336932

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentThread GetExitCodeThread GetThreadContext FlushInstructionCache OpenProcess GetSystemTimeAsFileTime GetTickCount GetTickCount64 VirtualProtect VirtualQuery GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetProcAddress GetComputerNameA MultiByteToWideChar WideCharToMultiByte AllocConsole FreeConsole ReadConsoleInputW WriteConsoleA FlushConsoleInputBuffer SetConsoleTextAttribute SetConsoleTitleA CreateToolhelp32Snapshot Process32FirstW TerminateProcess Thread32First Thread32Next GetTempPathA SetPriorityClass GetSystemInfo GetLocalTime VirtualQueryEx ReadProcessMemory MapViewOfFile GetModuleHandleW OpenFileMappingA GetConsoleWindow GetCurrentThreadId QueryPerformanceCounter GetStartupInfoW SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CreateThread GetCurrentProcess InitializeSListHead GetCurrentProcessId Sleep CreateEventW WaitForSingleObject SetEvent DeviceIoControl SetLastError GetLastError CloseHandle Beep CheckRemoteDebuggerPresent OutputDebugStringA IsDebuggerPresent GetVolumeInformationA GetTempPathW SetFileAttributesA WriteFile ReadFile GetFileSize FindNextFileW FindFirstFileW FindClose DeleteFileW DeleteFileA CreateFileW CreateFileA CreateDirectoryA GetEnvironmentVariableA Process32NextW GetStdHandle

user32

RegisterClassExA wsprintfW GetMessageW TranslateMessage DispatchMessageW PeekMessageW SendMessageW PostMessageW DefWindowProcW GetWindowTextA SetWindowTextW RedrawWindow InvalidateRect SetWindowRgn EndPaint BeginPaint UpdateWindow DrawTextW GetSystemMetrics EnableWindow KillTimer SetTimer SetFocus IsWindowVisible SetWindowPos PostQuitMessage CallWindowProcW MoveWindow RegisterClassW CreateWindowExW FindWindowA GetParent SetWindowLongPtrW FillRect ScreenToClient MessageBoxW GetWindowRect GetClientRect GetWindowTextW EnumWindows GetWindowThreadProcessId LoadCursorW TrackMouseEvent DefWindowProcA GetClassNameA SetWindowLongW DestroyWindow ShowWindow UnregisterClassA CreateWindowExA IsWindow UpdateLayeredWindow BringWindowToTop GetAsyncKeyState SendInput SetCapture ReleaseCapture GetForegroundWindow GetDC ReleaseDC MessageBoxA GetCursorPos GetWindowLongW

advapi32

GetUserNameA RegCreateKeyW RegCreateKeyExA RegDeleteValueA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegSetKeyValueW RegDeleteTreeW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCloseKey

ntdll

NtUnloadDriver NtLoadDriver RtlAdjustPrivilege RtlInitUnicodeString

gdiplus

GdipGetPropertyItem GdipGetPropertyItemSize GdipCreateImageAttributes GdipDisposeImageAttributes GdipSetImageAttributesColorMatrix GdipCreateFromHDC GdipDeleteGraphics GdipSetSmoothingMode GdipSetTextRenderingHint GdipDrawRectangleI GdipFillRectangleI GdipDrawImageRectRectI GdipFillPolygon GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipCloneImage GdipLoadImageFromFileICM GdipLoadImageFromFile GdipDeletePen GdipCreatePen1 GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdiplusShutdown GdiplusStartup GdipFree GdipAlloc GdipSetClipRectI GdipFillEllipse GdipCreateStringFormat GdipImageSelectActiveFrame GdipMeasureString GdipDrawImageRectI GdipDrawString GdipDeleteFont GdipCreateFont GdipResetClip GdipCreateFontFamilyFromName GdipDeleteFontFamily GdipGetGenericFontFamilySansSerif GdipDeleteStringFormat GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipSetStringFormatFlags

gdi32

CreatePen CreateRoundRectRgn CreateSolidBrush DeleteObject Ellipse GetStockObject RoundRect SelectObject SetBkColor SetBkMode SetTextColor CreateCompatibleDC DeleteDC CreateDIBSection CreateFontW

msvcp140

_Thrd_detach ?id@?$ctype@D@std@@2V0locale@2@A ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??Bios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Throw_Cpp_error@std@@YAXH@Z _Cnd_do_broadcast_at_thread_exit ?uncaught_exception@std@@YA_NXZ ?_Xbad_alloc@std@@YAXXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Id_cnt@id@locale@std@@0HA ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?width@ios_base@std@@QEAA_J_J@Z ?width@ios_base@std@@QEBA_JXZ ?flags@ios_base@std@@QEBAHXZ ?good@ios_base@std@@QEBA_NXZ ??7ios_base@std@@QEBA_NXZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z

winhttp

WinHttpCloseHandle WinHttpOpenRequest WinHttpReadData WinHttpOpen WinHttpSetTimeouts WinHttpConnect WinHttpAddRequestHeaders WinHttpReceiveResponse WinHttpSendRequest

iphlpapi

GetAdaptersInfo

bcrypt

BCryptOpenAlgorithmProvider BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptCreateHash BCryptCloseAlgorithmProvider BCryptGenRandom

winmm

timeEndPeriod timeBeginPeriod

vcruntime140

strrchr __std_terminate strstr __std_exception_copy __std_exception_destroy _CxxThrowException memcmp memcpy memmove memset strchr __current_exception __current_exception_context __C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _cexit _c_exit _register_thread_local_exe_atexit_callback _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _beginthreadex terminate _exit exit _initterm_e _initterm _get_narrow_winmain_command_line _seh_filter_exe _invoke_watson _set_app_type system

api-ms-win-crt-string-l1-1-0

strcat_s _stricmp strcmp strcpy_s _wcsicmp toupper strncmp strncpy_s strlen wcslen wcscat_s wcscpy_s wcsncpy

api-ms-win-crt-stdio-l1-1-0

fopen_s __p__commode freopen_s fopen __stdio_common_vsprintf_s __stdio_common_vsprintf __acrt_iob_func __stdio_common_vswprintf_s _get_stream_buffer_pointers fclose fflush fgetc fgetpos fgets fputc fread freopen fsetpos _fseeki64 fwrite setvbuf __stdio_common_vfprintf _set_fmode __stdio_common_vswprintf ungetc

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-utility-l1-1-0

srand rand

api-ms-win-crt-convert-l1-1-0

strtoul atoi mbstowcs

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

fmaxf __setusermatherr _fdclass atan2f ceilf cosf fmodf sinf sqrtf fminf

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode free _callnewh

api-ms-win-crt-locale-l1-1-0

_configthreadlocale