bundle.zip
- SHA256 6c487829774a91dd400674a2f17b96835ecaf1437d1640b4b82c2eadf890b326
Static task
static1
1 signatures
General
- Target bundle.zip
- Size 77.8MB
- Sample261023-bfpgtsbt3r
- SHA256 6c487829774a91dd400674a2f17b96835ecaf1437d1640b4b82c2eadf890b326
- MD5 44ea4382b3c289c2f9a996e5dce4b548
- SHA1 728c19d5aa8c40dc4901e34239300856252f749d
- SHA512 d6b8060149ab913e96c2e4fea24cca6916772d51c68f5a308336d7e6961ed193c373fdf72f9dacf2b07ae0b533e2c470c750b067d3635328e94d39571b809f28
- SSDEEP 1572864:rI582f2kj5E7bKNK3ueL4uALyodmrgMGrjPnG7qoHHJER63YA1myfND46YP0:D2fpj5QbKNMtELTVPnGVJER6IsNc6YM
- TLSH T1520833BCAA8CD89DEA809A45707B2566042C37F3378E0FDC5C854B1DEE95E8B93D2435
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/ai_engine.dll unpack001/rlai_sdk_manual.exe
File Explorer
-
bundle.zip.zip 77.8MB
-
ai_engine.dll.dll 17.0MB
-
rlai_sdk_manual.exe.exe 65.8MB
ai_engine.dll
- IMPHASH 54081fbe075b5316acdf212e164927be
- SHA256 6ea71842fff43da9980f116cb631d28395bf19b91566d0589b55c0aa2ae03c20
- MD5 8944b17b0b56ef5dc7b822b12c167944
- SHA1 54907543a773cdf20699383154ad12144c36ebab
- SHA512 1ea5b2cda7c892c19c4698b8360ae48151198c0a83d88a98f7d379614fcdd3ddc7437b8ac54b761f2c6418dde5a1ba8bf5c60c3d3c277ff9eb1e9ba38fc1d2e6
- SSDEEP 393216:BVvSdKwH30n6kfvnqdrEjidGn/b+mwJCyOn+9WHS:BZefH30Zfvnq8n/nwCyF
- TLSH T11D0723D7AADDA2E4C4C64B2055CB13CD20F5F65982E99A1E3ACB1C037A30F9BC909577
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
13714652
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
torch_cpu
?call@multinomial@_ops@at@@SA?AVTensor@3@AEBV43@VSymInt@c10@@_NV?$optional@UGenerator@at@@@std@@@Z
torch_cuda
?warp_size@cuda@at@@YAHXZ
c10
??0Error@c10@@QEAA@AEBV01@@Z
nvinfer_11
createInferRuntime_INTERNAL
msvcp140
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
kernel32
FindClose
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
api-ms-win-crt-stdio-l1-1-0
setvbuf
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-environment-l1-1-0
_putenv_s
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
api-ms-win-crt-math-l1-1-0
expf
api-ms-win-crt-string-l1-1-0
strlen
??$_typeMetaData@D@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@J@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@PEAD@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@PEAH@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@PEAM@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@PEAUHalf@c10@@@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@PEA_N@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@V?$unique_ptr@U?$atomic@_N@std@@U?$default_delete@U?$atomic@_N@std@@@2@@std@@@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@V?$unique_ptr@Vmutex@std@@U?$default_delete@Vmutex@std@@@2@@std@@@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@V?$vector@HV?$allocator@H@std@@@std@@@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@V?$vector@JV?$allocator@J@std@@@std@@@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@V?$vector@KV?$allocator@K@std@@@std@@@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@V?$vector@_JV?$allocator@_J@std@@@std@@@TypeMeta@caffe2@@CAGXZ
??$_typeMetaData@V_Uninitialized@detail@caffe2@@@TypeMeta@caffe2@@CAGXZ
??0Await@ivalue@c10@@AEAA@V?$SingletonOrSharedTypePtr@UType@c10@@@Type@2@@Z
??0Await@ivalue@c10@@AEAA@V?$SingletonOrSharedTypePtr@UType@c10@@@Type@2@V?$function@$$A6A?AUIValue@c10@@XZ@std@@@Z
??0Future@ivalue@c10@@AEAA@V?$SingletonOrSharedTypePtr@UType@c10@@@Type@2@V?$vector@UDevice@c10@@V?$allocator@UDevice@c10@@@std@@@std@@@Z
??0Object@ivalue@c10@@QEAA@$$QEAU012@@Z
??0Object@ivalue@c10@@QEAA@AEBU012@@Z
??0Object@ivalue@c10@@QEAA@UStrongTypePtr@2@_K@Z
??0Object@ivalue@c10@@QEAA@UWeakOrStrongTypePtr@2@_K@Z
??0RRefInterface@c10@@QEAA@XZ
??1Await@ivalue@c10@@UEAA@XZ
??1Future@ivalue@c10@@UEAA@XZ
??1Object@ivalue@c10@@UEAA@XZ
??1RRefInterface@c10@@UEAA@XZ
??4Object@ivalue@c10@@QEAAAEAU012@$$QEAU012@@Z
??4Object@ivalue@c10@@QEAAAEAU012@AEBU012@@Z
??_7Await@ivalue@c10@@6B@
??_7Future@ivalue@c10@@6B@
??_7Object@ivalue@c10@@6B@
??_7RRefInterface@c10@@6B@
?args@Await@ivalue@c10@@QEAAAEAV?$vector@UIValue@c10@@V?$allocator@UIValue@c10@@@std@@@std@@XZ
?compilation_unit@Object@ivalue@c10@@QEAA?AV?$shared_ptr@UCompilationUnit@jit@torch@@@std@@XZ
?completed@Await@ivalue@c10@@QEAA_NXZ
?completed@Future@ivalue@c10@@QEBA_NXZ
?constValue@Future@ivalue@c10@@QEBAAEBUIValue@3@XZ
?create@Object@ivalue@c10@@SA?AV?$intrusive_ptr@UObject@ivalue@c10@@U?$intrusive_target_default_null_type@UObject@ivalue@c10@@@detail@3@@3@UStrongTypePtr@3@_K@Z
?create@Object@ivalue@c10@@SA?AV?$intrusive_ptr@UObject@ivalue@c10@@U?$intrusive_target_default_null_type@UObject@ivalue@c10@@@detail@3@@3@UWeakOrStrongTypePtr@3@_K@Z
?createInstance@Future@ivalue@c10@@QEAA?AV?$intrusive_ptr@UFuture@ivalue@c10@@U?$intrusive_target_default_null_type@UFuture@ivalue@c10@@@detail@3@@3@V?$SingletonOrSharedTypePtr@UType@c10@@@Type@3@@Z
?devices@Future@ivalue@c10@@QEBAAEBV?$vector@UDevice@c10@@V?$allocator@UDevice@c10@@@std@@@std@@XZ
?elementType@Await@ivalue@c10@@QEBAAEBV?$SingletonOrSharedTypePtr@UType@c10@@@Type@3@XZ
?elementType@Future@ivalue@c10@@QEBAAEBV?$SingletonOrSharedTypePtr@UType@c10@@@Type@3@XZ
?ensureIsSubsetOfDevices@Future@ivalue@c10@@CAXAEBV?$vector@UDevice@c10@@V?$allocator@UDevice@c10@@@std@@@std@@0@Z
?exception_ptr@Future@ivalue@c10@@QEBA?AV0std@@XZ
?formatSetOfDevices@Future@ivalue@c10@@CA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$vector@UDevice@c10@@V?$allocator@UDevice@c10@@@std@@@5@@Z
?getDevicesOfStorages@Future@ivalue@c10@@CA?AV?$vector@UDevice@c10@@V?$allocator@UDevice@c10@@@std@@@std@@AEBVVirtualGuardImpl@impl@3@AEBV?$vector@V?$weak_intrusive_ptr@UStorageImpl@c10@@U?$intrusive_target_default_null_type@UStorageImpl@c10@@@detail@2@@c10@@V?$allocator@V?$weak_intrusive_ptr@UStorageImpl@c10@@U?$intrusive_target_default_null_type@UStorageImpl@c10@@@detail@2@@c10@@@std@@@5@@Z
?getSlot@Object@ivalue@c10@@QEBAAEBUIValue@3@_K@Z
?getTypeOfDevices@Future@ivalue@c10@@CA?AW4DeviceType@3@AEBV?$vector@UDevice@c10@@V?$allocator@UDevice@c10@@@std@@@std@@@Z
?hasError@Future@ivalue@c10@@QEBA_NXZ
?hasValue@Future@ivalue@c10@@QEBA_NXZ
?is_empty_strong_compilation_ref@Object@ivalue@c10@@QEBA_NXZ
?is_weak_compilation_ref@Object@ivalue@c10@@QEBA_NXZ
?markCompleted@Await@ivalue@c10@@QEAAXUIValue@3@@Z
?markCompleted@Future@ivalue@c10@@QEAAXUIValue@3@V?$optional@V?$vector@V?$weak_intrusive_ptr@UStorageImpl@c10@@U?$intrusive_target_default_null_type@UStorageImpl@c10@@@detail@2@@c10@@V?$allocator@V?$weak_intrusive_ptr@UStorageImpl@c10@@U?$intrusive_target_default_null_type@UStorageImpl@c10@@@detail@2@@c10@@@std@@@std@@@std@@@Z
?markCompleted@Future@ivalue@c10@@QEAAXXZ
?setArgs@Await@ivalue@c10@@QEAAXV?$vector@UIValue@c10@@V?$allocator@UIValue@c10@@@std@@@std@@@Z
?setError@Future@ivalue@c10@@QEAAXVexception_ptr@std@@@Z
?setErrorIfNeeded@Future@ivalue@c10@@QEAAXVexception_ptr@std@@@Z
?setErrorInternal@Future@ivalue@c10@@AEAAXVexception_ptr@std@@AEAV?$unique_lock@Vmutex@std@@@5@@Z
?setFn@Await@ivalue@c10@@QEAAXV?$function@$$A6A?AUIValue@c10@@XZ@std@@@Z
?setSlot@Object@ivalue@c10@@QEAAX_KUIValue@3@@Z
?slots@Object@ivalue@c10@@QEBAAEBV?$vector@UIValue@c10@@V?$allocator@UIValue@c10@@@std@@@std@@XZ
?sortAndDeduplicateDevices@Future@ivalue@c10@@CA?AV?$vector@UDevice@c10@@V?$allocator@UDevice@c10@@@std@@@std@@AEBVVirtualGuardImpl@impl@3@V45@@Z
?storages@Future@ivalue@c10@@QEBAAEBV?$vector@V?$weak_intrusive_ptr@UStorageImpl@c10@@U?$intrusive_target_default_null_type@UStorageImpl@c10@@@detail@2@@c10@@V?$allocator@V?$weak_intrusive_ptr@UStorageImpl@c10@@U?$intrusive_target_default_null_type@UStorageImpl@c10@@@detail@2@@c10@@@std@@@std@@XZ
?synchronizeWithCurrentStreams@Future@ivalue@c10@@AEAAXXZ
?tryRetrieveErrorMessage@Future@ivalue@c10@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?tryRetrieveErrorMessageInternal@Future@ivalue@c10@@AEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Vexception_ptr@5@@Z
?type@Await@ivalue@c10@@QEBAAEBV?$SingletonOrSharedTypePtr@UType@c10@@@Type@3@XZ
?unsafeRemoveSlot@Object@ivalue@c10@@QEAAX_K@Z
?unsafe_make_weak_compilation_ref@Object@ivalue@c10@@QEAAXXZ
?value@Await@ivalue@c10@@QEAA?AUIValue@3@XZ
?value@Future@ivalue@c10@@QEAA?AUIValue@3@XZ
?wait@Await@ivalue@c10@@QEAA?AUIValue@3@XZ
?wait@Future@ivalue@c10@@QEAAXXZ
?waitAndThrow@Future@ivalue@c10@@QEAAXXZ
aie_create
aie_destroy
aie_infer
aie_load
aie_load_from_memory
aie_load_trt_from_memory
Name
.text
Size
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.LsN
Size
Virtual Size
10.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.:qE
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.WKg
Size
17.0MB
Virtual Size
17.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
rlai_sdk_manual.exe
- IMPHASH 0e89e34229ca3bf7cb0576debfca347a
- SHA256 df10e0597cc5616dc079ef2be48e3a364fef6e7be8bd90ae7c16dba1d908d753
- MD5 20e1ae8499e3cc07139f814255396bd6
- SHA1 ba1588ca35882136b52c5980050a89f0681dc386
- SHA512 870eee9b3c21d940430fd8fafef18ed724fb861a5883e30526ac3a8ae8284ccad22ed00c77366c4cb4d20fb3cabcc1cacf25692942b03b590ae407bb9f7c7954
- SSDEEP 1572864:PGjk+5ugVXk/jy/eXOgnQ+mDYGfo3080Xj9tQrsqpdvSRJW5Y:d+51VX4jy/WPyDzj9tQldp5
- TLSH T144E7331BD5D956E8C4C30604618F079A22D071DED2FE7A1D2ECF6C02F956DA70A8AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
118270499
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetProcessAffinityMask
user32
SetCapture
winhttp
WinHttpQueryDataAvailable
bcrypt
BCryptOpenAlgorithmProvider
d3d11
D3D11CreateDeviceAndSwapChain
xinput1_4
ord2
shell32
SHGetKnownFolderPath
ole32
CoTaskMemFree
imm32
ImmReleaseContext
Name
.text
Size
Virtual Size
793KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
42.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.W`@
Size
Virtual Size
14.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.-)Y
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.BWr
Size
65.8MB
Virtual Size
65.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
268B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ