aitsd[.]exe[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

aitsd.exe.7z
Size

1.5MB
MD5

2079612b34eac8183d180df319f0c5ec
SHA1

03d16db6ccf7abe78cc4b76518cfce71f5fcde9e
SHA256

0475074b3d49671785465f9fc33fb30d34035798b830da28ad5c5d5b762b1601
SHA512

2ede17c5029b9b92cd007b26a465bd929f81342d1ad2724b8c75b2504083db66c8ec73a147b364d9a2d9b635ac96afa58d825b41fa8e06db061e0a4442527e3a
SSDEEP

49152:wXHYsWcdEMCs2Sa4F3WIWWavEcNfFvJ+F:8HYbMCs2h4FWIWWexFI

Score

N/A

Malware Config

Signatures

Files

aitsd.exe.7z
.7z

Password: infected
aitsd.exe
.exe windows x86

Password: infected

1bdecbb449f275a940a50a49882ce423

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
VirtualProtect
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
CreateFileW
WriteFile
CloseHandle
GetLocalTime
VirtualQuery
CreateFileMappingW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetSystemInfo
VirtualProtectEx
UnlockFile

user32

wsprintfA

shlwapi

ord158

opencv_core454

?ones@Mat@cv@@SA?AVMatExpr@2@V?$Size_@H@2@H@Z

libcrypto-1_1

OPENSSL_sk_num

libssl-1_1

SSL_CTX_free

setupapi

SetupDiDestroyDeviceInfoList

tnn

?Crop@MatUtils@tnn@@SA?AVStatus@2@AAVMat@2@0UCropParam@2@PAX@Z

qt5network

??0QNetworkInterface@@QAE@ABV0@@Z

qt5core

?at@QJsonArray@@QBE?AVQJsonValue@@H@Z

msvcp140

_Cnd_do_broadcast_at_thread_exit

ws2_32

ntohs

crypt32

CertCloseStore

advapi32

SetServiceStatus

vcruntime140

__std_terminate

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

_set_new_mode

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-stdio-l1-1-0

fwrite

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-time-l1-1-0

strftime

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

??0Blob@tnn@@QAE@ABV01@@Z
??0BlobConverter@tnn@@QAE@$$QAV01@@Z
??0BlobConverter@tnn@@QAE@ABV01@@Z
??0BlobDesc@tnn@@QAE@$$QAU01@@Z
??0BlobDesc@tnn@@QAE@ABU01@@Z
??0BlobDesc@tnn@@QAE@XZ
??0BlobHandle@tnn@@QAE@XZ
??0CopyMakeBorderParam@tnn@@QAE@XZ
??0CropParam@tnn@@QAE@XZ
??0Instance@tnn@@QAE@ABV01@@Z
??0Mat@tnn@@AAE@XZ
??0Mat@tnn@@QAE@ABV01@@Z
??0Mat@tnn@@QAE@W4DeviceType@1@W4MatType@1@PAX@Z
??0MatConvertParam@tnn@@QAE@$$QAU01@@Z
??0MatConvertParam@tnn@@QAE@ABU01@@Z
??0MatConvertParam@tnn@@QAE@XZ
??0ModelConfig@tnn@@QAE@$$QAU01@@Z
??0ModelConfig@tnn@@QAE@ABU01@@Z
??0ModelConfig@tnn@@QAE@XZ
??0NetworkConfig@tnn@@QAE@$$QAU01@@Z
??0NetworkConfig@tnn@@QAE@ABU01@@Z
??0NetworkConfig@tnn@@QAE@XZ
??0ResizeParam@tnn@@QAE@XZ
??0Status@tnn@@QAE@ABV01@@Z
??0TNN@tnn@@QAE@ABV01@@Z
??0WarpAffineParam@tnn@@QAE@XZ
??1BlobConverter@tnn@@QAE@XZ
??1BlobDesc@tnn@@QAE@XZ
??1FeatureInfo@@QAE@XZ
??1MatConvertParam@tnn@@QAE@XZ
??1ModelConfig@tnn@@QAE@XZ
??1NetworkConfig@tnn@@QAE@XZ
??4Blob@tnn@@QAEAAV01@ABV01@@Z
??4BlobConverter@tnn@@QAEAAV01@$$QAV01@@Z
??4BlobConverter@tnn@@QAEAAV01@ABV01@@Z
??4BlobDesc@tnn@@QAEAAU01@$$QAU01@@Z
??4BlobDesc@tnn@@QAEAAU01@ABU01@@Z
??4BlobHandle@tnn@@QAEAAU01@$$QAU01@@Z
??4BlobHandle@tnn@@QAEAAU01@ABU01@@Z
??4CopyMakeBorderParam@tnn@@QAEAAU01@$$QAU01@@Z
??4CopyMakeBorderParam@tnn@@QAEAAU01@ABU01@@Z
??4CropParam@tnn@@QAEAAU01@$$QAU01@@Z
??4CropParam@tnn@@QAEAAU01@ABU01@@Z
??4DimsVectorUtils@tnn@@QAEAAV01@$$QAV01@@Z
??4DimsVectorUtils@tnn@@QAEAAV01@ABV01@@Z
??4FeatureInfo@@QAEAAV0@ABV0@@Z
??4Instance@tnn@@QAEAAV01@ABV01@@Z
??4Mat@tnn@@QAEAAV01@ABV01@@Z
??4MatConvertParam@tnn@@QAEAAU01@$$QAU01@@Z
??4MatConvertParam@tnn@@QAEAAU01@ABU01@@Z
??4MatUtils@tnn@@QAEAAV01@$$QAV01@@Z
??4MatUtils@tnn@@QAEAAV01@ABV01@@Z
??4ModelConfig@tnn@@QAEAAU01@$$QAU01@@Z
??4ModelConfig@tnn@@QAEAAU01@ABU01@@Z
??4NetworkConfig@tnn@@QAEAAU01@$$QAU01@@Z
??4NetworkConfig@tnn@@QAEAAU01@ABU01@@Z
??4ResizeParam@tnn@@QAEAAU01@$$QAU01@@Z
??4ResizeParam@tnn@@QAEAAU01@ABU01@@Z
??4Status@tnn@@QAEAAV01@ABV01@@Z
??4TNN@tnn@@QAEAAV01@ABV01@@Z
??4WarpAffineParam@tnn@@QAEAAU01@$$QAU01@@Z
??4WarpAffineParam@tnn@@QAEAAU01@ABU01@@Z
??5@YA?AVBigInt@@V0@H@Z
??6@YA?AVBigInt@@V0@H@Z
??7@YA_NABVBigInt@@@Z
??8@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVBigInt@@@Z
??8@YA_NABVBigInt@@0@Z
??8@YA_NABVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??8@YA_NABVBigInt@@_J@Z
??9@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVBigInt@@@Z
??9@YA_NABVBigInt@@0@Z
??9@YA_NABVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??9@YA_NABVBigInt@@_J@Z
??D@YA?AVBigInt@@V0@ABV0@@Z
??D@YA?AVBigInt@@V0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??D@YA?AVBigInt@@V0@_J@Z
??D@YA?AVBigInt@@_JV0@@Z
??G@YA?AVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV0@@Z
??G@YA?AVBigInt@@V0@@Z
??G@YA?AVBigInt@@V0@ABV0@@Z
??G@YA?AVBigInt@@V0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??G@YA?AVBigInt@@V0@_J@Z
??G@YA?AVBigInt@@_JV0@@Z
??H@YA?AVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV0@@Z
??H@YA?AVBigInt@@V0@ABV0@@Z
??H@YA?AVBigInt@@V0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??H@YA?AVBigInt@@V0@_J@Z
??H@YA?AVBigInt@@_JV0@@Z
??I@YA?AVBigInt@@ABV0@_J@Z
??I@YA?AVBigInt@@V0@ABV0@@Z
??K@YA?AVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV0@@Z
??K@YA?AVBigInt@@V0@ABV0@@Z
??K@YA?AVBigInt@@V0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??K@YA?AVBigInt@@V0@_J@Z
??K@YA?AVBigInt@@_JV0@@Z
??L@YA?AVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV0@@Z
??L@YA?AVBigInt@@V0@ABV0@@Z
??L@YA?AVBigInt@@V0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??L@YA?AVBigInt@@V0@_J@Z
??L@YA?AVBigInt@@_JV0@@Z
??M@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVBigInt@@@Z
??M@YA_NABVBigInt@@0@Z
??M@YA_NABVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??M@YA_NABVBigInt@@_J@Z
??N@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVBigInt@@@Z
??N@YA_NABVBigInt@@0@Z
??N@YA_NABVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??N@YA_NABVBigInt@@_J@Z
??O@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVBigInt@@@Z
??O@YA_NABVBigInt@@0@Z
??O@YA_NABVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??O@YA_NABVBigInt@@_J@Z
??P@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVBigInt@@@Z
??P@YA_NABVBigInt@@0@Z
??P@YA_NABVBigInt@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??P@YA_NABVBigInt@@_J@Z
??S@YA?AVBigInt@@V0@@Z
??T@YA?AVBigInt@@ABV0@_J@Z
??T@YA?AVBigInt@@V0@ABV0@@Z
??U@YA?AVBigInt@@ABV0@_J@Z
??U@YA?AVBigInt@@V0@ABV0@@Z
??X@YAAAVBigInt@@AAV0@ABV0@@Z
??X@YAAAVBigInt@@AAV0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??X@YAAAVBigInt@@AAV0@_J@Z
??Y@YAAAVBigInt@@AAV0@ABV0@@Z
??Y@YAAAVBigInt@@AAV0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??Y@YAAAVBigInt@@AAV0@_J@Z
??Z@YAAAVBigInt@@AAV0@ABV0@@Z
??Z@YAAAVBigInt@@AAV0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??Z@YAAAVBigInt@@AAV0@_J@Z
??_0@YAAAVBigInt@@AAV0@ABV0@@Z
??_0@YAAAVBigInt@@AAV0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??_0@YAAAVBigInt@@AAV0@_J@Z
??_1@YAAAVBigInt@@AAV0@ABV0@@Z
??_1@YAAAVBigInt@@AAV0@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??_1@YAAAVBigInt@@AAV0@_J@Z
??_2@YAAAVBigInt@@AAV0@H@Z
??_3@YAAAVBigInt@@AAV0@H@Z
??_4@YAAAVBigInt@@AAV0@ABV0@@Z
??_4@YAAAVBigInt@@AAV0@_J@Z
??_5@YAAAVBigInt@@AAV0@ABV0@@Z
??_5@YAAAVBigInt@@AAV0@_J@Z
??_6@YAAAVBigInt@@AAV0@ABV0@@Z
??_6@YAAAVBigInt@@AAV0@_J@Z
??_7Blob@tnn@@6B@
??_FStatus@tnn@@QAEXXZ
?GetFeatureSource@FeatureInfo@@QAE?AW4E_FEATURE_SOURCE@@XZ
?GetFeatures@FeatureInfo@@QAEHHPAM@Z
?GetFeatures@FeatureInfo@@QAEPAMXZ
?GetFilePath@FeatureInfo@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetLabel@FeatureInfo@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetModelVersion@FeatureInfo@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetRecognitionId@FeatureInfo@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetScaleNo@FeatureInfo@@QAEHXZ
?GetTimeStamp@FeatureInfo@@QAE_KXZ
?SetFeatureSource@FeatureInfo@@QAEXW4E_FEATURE_SOURCE@@@Z
?SetFeatures@FeatureInfo@@QAEHHPBM@Z
?SetFilePath@FeatureInfo@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetLabel@FeatureInfo@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetModelVersion@FeatureInfo@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetRecognitionId@FeatureInfo@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetScaleNo@FeatureInfo@@QAEXH@Z
?SetTimeStamp@FeatureInfo@@QAEX_K@Z

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 663KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 825KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

1bdecbb449f275a940a50a49882ce423

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

opencv_core454

libcrypto-1_1

libssl-1_1

setupapi

tnn

qt5network

qt5core

msvcp140

ws2_32

crypt32

advapi32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: - Virtual size: 1.4MB

.rdata Size: - Virtual size: 663KB

.data Size: - Virtual size: 47KB

.text Size: - Virtual size: 825KB

.data Size: - Virtual size: 68KB

Size: 226KB - Virtual size: 226KB

.reloc Size: 2KB - Virtual size: 2KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: - Virtual size: 1.4MB

.rdata
Size: - Virtual size: 663KB

.data
Size: - Virtual size: 47KB

.text
Size: - Virtual size: 825KB

.data
Size: - Virtual size: 68KB

.reloc
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 6KB - Virtual size: 5KB