bef850fac7612d85d2472c05fee938a94989e87cab2b3c3ea07c1f7617d87c3f

Sharing

Copy URL

Twitter E-mail

General

Target

bef850fac7612d85d2472c05fee938a94989e87cab2b3c3ea07c1f7617d87c3f
Size

156KB
MD5

42730a153ba047ab3a8a584d619a0059
SHA1

1fd044259eba65d2b385a176ff772ce593f9f874
SHA256

bef850fac7612d85d2472c05fee938a94989e87cab2b3c3ea07c1f7617d87c3f
SHA512

1617ab53eb2609fc2801c47a8b97d5371a6c0266ee5844bdd3dc0ab988f8008441f9f4f96e10a3a87fc8a80b07301701d12058dcc6946997fa9e97be1f3f7b9c
SSDEEP

3072:k7X0eLimQoUTKwJEthf+0aguAPJ6e8mr:2EJ6f+0aLAge

Score

N/A

Malware Config

Signatures

Files

bef850fac7612d85d2472c05fee938a94989e87cab2b3c3ea07c1f7617d87c3f
.dll windows x86

19dba542509f9fa47f1ae61504a66dd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ljocri32

?hplj_ocr_get_result@@YA?AW4HPLJ_STATUS@@HPAHQAUsOCRResult@@@Z
?hplj_ocr_post_last@@YA?AW4HPLJ_STATUS@@W4POST_TYPE@@@Z
?hplj_ocr_post@@YA?AW4HPLJ_STATUS@@W4POST_TYPE@@@Z
?hplj_ocr_1line@@YA?AW4HPLJ_STATUS@@F@Z
?hplj_ocr_linesegment@@YA?AW4HPLJ_STATUS@@PAW4htype@@PADHHHHHHFPAH@Z
?hplj_ocr_exit@@YA?AW4HPLJ_STATUS@@XZ
?hplj_ocr_initialize@@YA?AW4HPLJ_STATUS@@QAD000@Z
?hplj_ocr_get_inifiles@@YA?AW4HPLJ_STATUS@@QAD00000@Z

ljeng32

?lang_type@@YA?AW4HPLJ_LANG_TYPE@@XZ

kernel32

VirtualFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
GetCurrentThread
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID

Exports

Exports

?message@CheckError@@QBEPADXZ
?status@CheckError@@QAE?AW4HPLJ_STATUS@@XZ
ir_fe_get_lang_type
ir_fe_ocr_1line
ir_fe_ocr_exit
ir_fe_ocr_get_inifiles
ir_fe_ocr_get_result
ir_fe_ocr_initialize
ir_fe_ocr_linesegment
ir_fe_ocr_post
ir_fe_ocr_post_last

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19dba542509f9fa47f1ae61504a66dd9

Headers

File Characteristics

Imports

ljocri32

ljeng32

kernel32

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 66KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 64KB - Virtual size: 66KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 68KB - Virtual size: 66KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 64KB - Virtual size: 66KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB