Overview

overview

7

Static

static

3

tesseract-...27.exe

windows7-x64

7

tesseract-...27.exe

windows10-2004-x64

7

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

ambiguous_...1.html

windows7-x64

1

ambiguous_...1.html

windows10-2004-x64

1

ambiguous_words.exe

windows7-x64

1

ambiguous_words.exe

windows10-2004-x64

1

classifier...1.html

windows7-x64

1

classifier...1.html

windows10-2004-x64

1

classifier_tester.exe

windows7-x64

1

classifier_tester.exe

windows10-2004-x64

1

cntraining.1.html

windows7-x64

1

cntraining.1.html

windows10-2004-x64

1

cntraining.exe

windows7-x64

1

cntraining.exe

windows10-2004-x64

1

combine_la...1.html

windows7-x64

1

combine_la...1.html

windows10-2004-x64

1

combine_la...el.exe

windows7-x64

1

combine_la...el.exe

windows10-2004-x64

1

combine_te...1.html

windows7-x64

1

combine_te...1.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    tesseract-ocr-w64-setup-v5.0.0-alpha.20201127.exe

  • Size

    42.0MB

  • MD5

    e3e83d9e59dc66f9328940640910a731

  • SHA1

    aff9d47058b4b172c65db8f8d0d486a3e297a916

  • SHA256

    459b0cb9830f52ace1106ac9a2d636423de893fe301743891e0a2879fb8cd8a7

  • SHA512

    8c46106ffa2caf8ef03cea51b871c1b3cf756d2a3c9f2a34c3a0959abb8708fda7378dcd432c84104294c2e96ecbc3278a547a0ba0a21ff9e8b1cbc2c76705da

  • SSDEEP

    786432:WtHoZOx0E52L17X274NtKP8ih/WahlNel6wBcImhSZ4+S/buMdMPDTbU0k0vJhHZ:WtDx0k2L1WMKP59WelNeltcdd+SDDWh7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 72 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • tesseract-ocr-w64-setup-v5.0.0-alpha.20201127.exe
    .exe windows:4 windows x86 arch:x86

    eb0806dae800674e97000f10e2ec3aa2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    8ef3613e48db9e7b48e33704238cd659


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    f551c1b6fe8f3bf413791c3629cb9935


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    7b51d75d96bc1e4138754d4ab976de2b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2c8f995b53686e9af55e5204b29f94af


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    ba7979c5a57c89a520f669065f4d9c5d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e8427c885b2401540170e97e4a3c8822


    Headers

    Imports

    Exports

    Sections

  • ambiguous_words.1.html
    .html .js polyglot
  • ambiguous_words.exe
    .exe windows:4 windows x64 arch:x64

    e3b6ee0ae8431dfb3a5aecb5c31856bc


    Headers

    Imports

    Sections

  • classifier_tester.1.html
    .html .js polyglot
  • classifier_tester.exe
    .exe windows:4 windows x64 arch:x64

    ca61fc3945d49835ad5776b3feb255ba


    Headers

    Imports

    Sections

  • cntraining.1.html
    .html .js polyglot
  • cntraining.exe
    .exe windows:4 windows x64 arch:x64

    0efc97ecdcc3965be978efa2aa49bb15


    Headers

    Imports

    Sections

  • combine_lang_model.1.html
    .html .js polyglot
  • combine_lang_model.exe
    .exe windows:4 windows x64 arch:x64

    a0c415c857f3d3964a032326f75a6c17


    Headers

    Imports

    Sections

  • combine_tessdata.1.html
    .html .js polyglot
  • combine_tessdata.exe
    .exe windows:4 windows x64 arch:x64

    3d106545896cb56ddd21db77907b346f


    Headers

    Imports

    Sections

  • dawg2wordlist.1.html
    .html .js polyglot
  • dawg2wordlist.exe
    .exe windows:4 windows x64 arch:x64

    86218fc6ebe4a021cb0bb72fe2e89671


    Headers

    Imports

    Sections

  • doc/AUTHORS
  • doc/LICENSE
  • doc/README.md
  • iconv.dll
    .dll windows:4 windows x64 arch:x64

    929addcfc1c5157f6ada9e98e65ecb5d


    Headers

    Imports

    Exports

    Sections

  • icudt64.dll
    .dll windows:4 windows x64 arch:x64

    fcfbe5457e76d2ac347d7db113c0ca3b


    Headers

    Imports

    Exports

    Sections

  • icuin64.dll
    .dll windows:4 windows x64 arch:x64

    5188c30f2b2bdb42914efaa453eb2bed


    Headers

    Imports

    Exports

    Sections

  • icuuc64.dll
    .dll windows:4 windows x64 arch:x64

    aabe633868c67d91e92687143fa798a9


    Headers

    Imports

    Exports

    Sections

  • libarchive-13.dll
    .dll windows:4 windows x64 arch:x64

    d06a98ae894ffd908a1142bdc66733da


    Headers

    Imports

    Exports

    Sections

  • libbz2-1.dll
    .dll windows:4 windows x64 arch:x64

    01f604559207ad208065448b82c59ef6


    Headers

    Imports

    Exports

    Sections

  • libcairo-2.dll
    .dll windows:4 windows x64 arch:x64

    5c935281b947a3f5b4f8042013c5179f


    Headers

    Imports

    Exports

    Sections

  • libcurl-4.dll
    .dll windows:4 windows x64 arch:x64

    3239b5416940f07620c2b3f54421775f


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:4 windows x64 arch:x64

    617464d3d6f094523fb0dfe642577d2b


    Headers

    Imports

    Exports

    Sections

  • libexpat-1.dll
    .dll windows:4 windows x64 arch:x64

    06e9182d2edef0828893c05ce622bfc1


    Headers

    Imports

    Exports

    Sections

  • libffi-6.dll
    .dll windows:4 windows x64 arch:x64

    7bbb82549f5061ab873d06c6e5aef58f


    Headers

    Imports

    Exports

    Sections

  • libfontconfig-1.dll
    .dll windows:4 windows x64 arch:x64

    a63ba126c559e655283be5e16f80d6d5


    Headers

    Imports

    Exports

    Sections

  • libfreetype-6.dll
    .dll windows:4 windows x64 arch:x64

    6838572be4f6326690020bc769ad9f87


    Headers

    Imports

    Exports

    Sections

  • libgcc_s_seh-1.dll
    .dll windows:4 windows x64 arch:x64

    b8547353b6beb87cf7560462f9aacd11


    Headers

    Imports

    Exports

    Sections

  • libgif-7.dll
    .dll windows:4 windows x64 arch:x64

    447d54f480ae7d4c7a09595795b73da8


    Headers

    Imports

    Exports

    Sections

  • libglib-2.0-0.dll
    .dll windows:4 windows x64 arch:x64

    f9be54174aa615be577714beafff112a


    Headers

    Imports

    Exports

    Sections

  • libgobject-2.0-0.dll
    .dll windows:4 windows x64 arch:x64

    35cc65c4fb0c67ceb8724bfd2e9ab213


    Headers

    Imports

    Exports

    Sections

  • libgomp-1.dll
    .dll windows:4 windows x64 arch:x64

    e214e26a052a08f97b64a15608e97fc3


    Headers

    Imports

    Exports

    Sections

  • libharfbuzz-0.dll
    .dll windows:4 windows x64 arch:x64

    02dc04c6d46f4a4af8ba9094de9ebab7


    Headers

    Imports

    Exports

    Sections

  • libintl-8.dll
    .dll windows:4 windows x64 arch:x64

    48ef64241a01f86c647d9a4701bba174


    Headers

    Imports

    Exports

    Sections

  • libjbig-2.dll
    .dll windows:4 windows x64 arch:x64

    1c71d5f15cf3b71ceb7bfea3a12f11c3


    Headers

    Imports

    Exports

    Sections

  • libjpeg-8.dll
    .dll windows:4 windows x64 arch:x64

    a0eb4200550411e0e3262f705cc9f251


    Headers

    Imports

    Exports

    Sections

  • liblept-5.dll
    .dll windows:4 windows x64 arch:x64

    fb240494b57e1c9b12e31a7bd3685134


    Headers

    Imports

    Exports

    Sections

  • liblz4-1.dll
    .dll windows:4 windows x64 arch:x64

    50cdd5477420455c168372227cba52d9


    Headers

    Imports

    Exports

    Sections

  • liblzma-5.dll
    .dll windows:4 windows x64 arch:x64

    d9a26efff0c7d4c7d938a91b5cf0e552


    Headers

    Imports

    Exports

    Sections

  • libnettle-6.dll
    .dll windows:4 windows x64 arch:x64

    80fdee8341cb69d344eea51ea4bdeac7


    Headers

    Imports

    Exports

    Sections

  • libnghttp2-14.dll
    .dll windows:4 windows x64 arch:x64

    9b02192886b0f7c9fa8a0b641d93b83f


    Headers

    Imports

    Exports

    Sections

  • libopenjp2.dll
    .dll windows:4 windows x64 arch:x64

    5494b8d169216133a2d169e9d3dd601e


    Headers

    Imports

    Exports

    Sections

  • libpango-1.0-0.dll
    .dll windows:4 windows x64 arch:x64

    2b0c30441e70383f9c5f75c96852257f


    Headers

    Imports

    Exports

    Sections

  • libpangocairo-1.0-0.dll
    .dll windows:4 windows x64 arch:x64

    f2679315a919e73fafd2e68e1afc3b76


    Headers

    Imports

    Exports

    Sections

  • libpangoft2-1.0-0.dll
    .dll windows:4 windows x64 arch:x64

    80cb8b35d777686adee8f2a82a52456a


    Headers

    Imports

    Exports

    Sections

  • libpangowin32-1.0-0.dll
    .dll windows:4 windows x64 arch:x64

    e272ee27572d1d13a6a78b90d66e979b


    Headers

    Imports

    Exports

    Sections

  • libpcre-1.dll
    .dll windows:4 windows x64 arch:x64

    e39b59f9669f1155a546fdf748686d8d


    Headers

    Imports

    Exports

    Sections

  • libpixman-1-0.dll
    .dll windows:4 windows x64 arch:x64

    cd4912140f425b4e90fd20f3e7eadaa0


    Headers

    Imports

    Exports

    Sections

  • libpng16-16.dll
    .dll windows:4 windows x64 arch:x64

    56fb8f3733517b069cb94bbb374b26d5


    Headers

    Imports

    Exports

    Sections

  • libssh2-1.dll
    .dll windows:4 windows x64 arch:x64

    8906db46ae26c163568aa39021d80a72


    Headers

    Imports

    Exports

    Sections

  • libstdc++-6.dll
    .dll windows:4 windows x64 arch:x64

    9e0df67fec6bfde883c76fd8a5cb1f4e


    Headers

    Imports

    Exports

    Sections

  • libtesseract-5.dll
    .dll windows:4 windows x64 arch:x64

    467faa0b12809abc8666541bbae8409a


    Headers

    Imports

    Exports

    Sections

  • libtiff-5.dll
    .dll windows:4 windows x64 arch:x64

    103ddcdcc619b06bf04dd1ac8c7f4058


    Headers

    Imports

    Exports

    Sections

  • libwebp-7.dll
    .dll windows:4 windows x64 arch:x64

    6eae4f39346c245f17757631f2c40c5c


    Headers

    Imports

    Exports

    Sections

  • libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    b5d23cc55ec8f2edd6beee40a881b063


    Headers

    Imports

    Exports

    Sections

  • libxml2-2.dll
    .dll windows:4 windows x64 arch:x64

    7116a4a26dc6ff2959037b0acbe24513


    Headers

    Imports

    Exports

    Sections

  • lstmeval.1.html
    .html .js polyglot
  • lstmeval.exe
    .exe windows:4 windows x64 arch:x64

    3159893a0abc8af099690476a53abc07


    Headers

    Imports

    Sections

  • lstmtraining.1.html
    .html .js polyglot
  • lstmtraining.exe
    .exe windows:4 windows x64 arch:x64

    9c5d951ca7f0ede855908a9c3fb5c00a


    Headers

    Imports

    Sections

  • merge_unicharsets.1.html
    .html .js polyglot
  • merge_unicharsets.exe
    .exe windows:4 windows x64 arch:x64

    57f1dcf014dd825dcc91f4ead74a8f55


    Headers

    Imports

    Sections

  • mftraining.1.html
    .html .js polyglot
  • mftraining.exe
    .exe windows:4 windows x64 arch:x64

    3314fc3ccfa75b8ecc50cb30779a431e


    Headers

    Imports

    Sections

  • set_unicharset_properties.1.html
    .html .js polyglot
  • set_unicharset_properties.exe
    .exe windows:4 windows x64 arch:x64

    17190aa297f9cc6698df5f59d03508a8


    Headers

    Imports

    Sections

  • shapeclustering.1.html
    .html .js polyglot
  • shapeclustering.exe
    .exe windows:4 windows x64 arch:x64

    e0d901513bed47a88b10a4c41064cde9


    Headers

    Imports

    Sections

  • ssleay32.dll
    .dll windows:4 windows x64 arch:x64

    ce6eaaa8949d5399833bba9a280f1b63


    Headers

    Imports

    Exports

    Sections

  • tessdata/ScrollView.jar
    .jar
  • tessdata/configs/alto
  • tessdata/configs/ambigs.train
  • tessdata/configs/api_config
  • tessdata/configs/bigram
  • tessdata/configs/box.train
  • tessdata/configs/box.train.stderr
  • tessdata/configs/digits
  • tessdata/configs/get.images
  • tessdata/configs/hocr
  • tessdata/configs/inter
  • tessdata/configs/kannada
  • tessdata/configs/linebox
  • tessdata/configs/logfile
  • tessdata/configs/lstm.train
  • tessdata/configs/lstmbox
  • tessdata/configs/lstmdebug
  • tessdata/configs/makebox
  • tessdata/configs/pdf
  • tessdata/configs/quiet
  • tessdata/configs/rebox
  • tessdata/configs/strokewidth
  • tessdata/configs/tsv
  • tessdata/configs/txt
  • tessdata/configs/unlv
  • tessdata/configs/wordstrbox
  • tessdata/eng.traineddata
  • tessdata/eng.user-patterns
  • tessdata/eng.user-words
  • tessdata/jaxb-api-2.3.1.jar
    .jar
  • tessdata/osd.traineddata
  • tessdata/pdf.ttf
  • tessdata/piccolo2d-core-3.0.1.jar
    .jar
  • tessdata/piccolo2d-extras-3.0.1.jar
    .jar
  • tessdata/tessconfigs/batch
  • tessdata/tessconfigs/batch.nochop
  • tessdata/tessconfigs/matdemo
  • tessdata/tessconfigs/msdemo
  • tessdata/tessconfigs/nobatch
  • tessdata/tessconfigs/segdemo
  • tesseract-uninstall.exe
    .exe windows:4 windows x86 arch:x86

    eb0806dae800674e97000f10e2ec3aa2


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    f551c1b6fe8f3bf413791c3629cb9935


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2c8f995b53686e9af55e5204b29f94af


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    ba7979c5a57c89a520f669065f4d9c5d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • tesseract.1.html
    .html .js polyglot
  • tesseract.exe
    .exe windows:4 windows x64 arch:x64

    ca33159e07c02d09857fc5a5b16ba781


    Headers

    Imports

    Sections

  • text2image.1.html
    .html .js polyglot
  • text2image.exe
    .exe windows:4 windows x64 arch:x64

    cbb5431639340d4fbda5aaa96b464725


    Headers

    Imports

    Sections

  • unicharambigs.5.html
    .html .js polyglot
  • unicharset.5.html
    .html .js polyglot
  • unicharset_extractor.1.html
    .html .js polyglot
  • unicharset_extractor.exe
    .exe windows:4 windows x64 arch:x64

    88a55f16538eff9e52661f65f520a9b6


    Headers

    Imports

    Sections

  • winpath.exe
    .exe windows:4 windows x64 arch:x64

    5dd4c21c759e349779fa8abd334db764


    Headers

    Imports

    Sections

  • wordlist2dawg.1.html
    .html .js polyglot
  • wordlist2dawg.exe
    .exe windows:4 windows x64 arch:x64

    fed50940b9a1a3216fba516694604121


    Headers

    Imports

    Sections

  • zlib1.dll
    .dll windows:4 windows x64 arch:x64

    cd599b2cd6ca8fabcd9fd9eb27e3e2af


    Headers

    Imports

    Exports

    Sections