D:\Development\Active\tesseract-vs\vs2015\bin\x64\DLL_Release\liblept172.pdb
Static task
static1
Behavioral task
behavioral1
Sample
liblept172.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
liblept172.dll
Resource
win10v2004-20240508-en
General
-
Target
liblept172.dll
-
Size
3.1MB
-
MD5
0c96d0848f83fabd320f5dd4281c88c3
-
SHA1
362391b42d5d96a6bf0302d81381ed0975f3d074
-
SHA256
afee13ede6cdd229f293d4e2371442caa148c911d29aa9a2aedc4bb593470b8d
-
SHA512
2415bb10cc298fe3edad1d53015a443dc23d709b72b724249711eb7fce67f98dfc3c4ae232f41bdb4a72a9ac82a2329f44a8346ff7165735cb6321934cbd21a0
-
SSDEEP
49152:+3CRXroVWiSLD4VPrxkU/gpcUDAfvuHWyTro6PJQAV17m8LTCZu21Uf0I2:1Xreq7rru3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource liblept172.dll
Files
-
liblept172.dll.dll windows:6 windows x64 arch:x64
91f57e4941198501aff89839b78ba752
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetProcessTimes
GetCurrentProcess
GetSystemTimeAsFileTime
GetTempPathA
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesA
FindNextFileA
DeleteFileA
CopyFileA
MoveFileExA
WideCharToMultiByte
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
FindFirstFileA
FindClose
GetFileAttributesA
GetLastError
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
user32
ReleaseDC
GetDC
gdi32
CreateDIBSection
DeleteObject
GetObjectA
vcruntime140
__std_type_info_destroy_list
memmove
memcpy
memset
longjmp
strstr
strchr
strrchr
memcmp
__intrinsic_setjmp
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__C_specific_handler
api-ms-win-crt-heap-l1-1-0
calloc
realloc
free
malloc
api-ms-win-crt-math-l1-1-0
expf
sqrt
powf
ceil
ceilf
atan
log
tan
exp
pow
atan2
sin
floor
floorf
cos
api-ms-win-crt-string-l1-1-0
strncpy
isdigit
strcmp
isprint
isalnum
strncmp
strncat
api-ms-win-crt-stdio-l1-1-0
ftell
_fseeki64
_wopen
fputc
__stdio_common_vsprintf
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vfprintf
fputs
_ftelli64
ferror
fflush
rewind
fread
fwrite
fgetc
fgets
tmpfile
fopen
_getcwd
_close
_lseek
_open
_read
_write
__stdio_common_vfscanf
__stdio_common_vsnprintf_s
fclose
getc
fseek
api-ms-win-crt-utility-l1-1-0
_lfind
qsort
bsearch
srand
rand
api-ms-win-crt-runtime-l1-1-0
_cexit
system
_getpid
terminate
_crt_at_quick_exit
_crt_atexit
abort
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
exit
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
api-ms-win-crt-convert-l1-1-0
atoi
atof
strtod
api-ms-win-crt-time-l1-1-0
_localtime64
strftime
_time64
_gmtime64
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-filesystem-l1-1-0
_fstat64i32
_fullpath
Exports
Exports
?AlphaMaskBorderVals@@3PAMA
?ConvolveSamplingFactX@@3HA
?ConvolveSamplingFactY@@3HA
?ImageFileFormatExtensions@@3PAPEBDA
?LeptMsgSeverity@@3HA
?MORPH_BC@@3HA
?NumImageFileFormatExtensions@@3HA
addColorizedGrayToCmap
adjacentOnPixelInRaster
affineInvertXform
affineXformPt
affineXformSampledPt
appendSubdirectory
applyCubicFit
applyLinearFit
applyQuadraticFit
applyQuarticFit
arrayFindEachSequence
arrayFindSequence
barcodeDispatchDecoder
barcodeFormatIsSupported
bbufferCreate
bbufferDestroy
bbufferDestroyAndSaveData
bbufferExtendArray
bbufferRead
bbufferReadStream
bbufferWrite
bbufferWriteStream
bilinearXformPt
bilinearXformSampledPt
bmfCreate
bmfDestroy
bmfGetBaseline
bmfGetLineStrings
bmfGetPix
bmfGetStringWidth
bmfGetWidth
bmfGetWordWidths
boxAdjustSides
boxBoundingRegion
boxChangeRefcount
boxClipToRectangle
boxClipToRectangleParams
boxClone
boxContains
boxContainsPt
boxConvertToPta
boxCopy
boxCreate
boxCreateValid
boxDestroy
boxEqual
boxGetCenter
boxGetGeometry
boxGetRefcount
boxGetSideLocation
boxIntersectByLine
boxIntersects
boxIsValid
boxOverlapArea
boxOverlapFraction
boxOverlapRegion
boxPrintStreamInfo
boxRelocateOneSide
boxRotateOrth
boxSeparationDistance
boxSetGeometry
boxSimilar
boxTransform
boxTransformOrdered
boxaAddBox
boxaAdjustHeightToTarget
boxaAdjustWidthToTarget
boxaAffineTransform
boxaBinSort
boxaClear
boxaClipToBox
boxaCombineOverlaps
boxaCompareRegions
boxaConstrainSize
boxaContainedInBox
boxaConvertToPta
boxaCopy
boxaCreate
boxaDestroy
boxaDisplayTiled
boxaEncapsulateAligned
boxaEqual
boxaExtendArray
boxaExtendArrayToSize
boxaExtractAsNuma
boxaExtractAsPta
boxaExtractSortedPattern
boxaFillSequence
boxaGetArea
boxaGetAverageSize
boxaGetBox
boxaGetBoxGeometry
boxaGetCount
boxaGetCoverage
boxaGetExtent
boxaGetMedian
boxaGetNearestToPt
boxaGetRankSize
boxaGetValidBox
boxaGetValidCount
boxaGetWhiteblocks
boxaHandleOverlaps
boxaInitFull
boxaInsertBox
boxaIntersectsBox
boxaIsFull
boxaJoin
boxaLinearFit
boxaLocationRange
boxaMakeAreaIndicator
boxaMakeSizeIndicator
boxaMergeEvenOdd
boxaModifyWithBoxa
boxaPermutePseudorandom
boxaPermuteRandom
boxaPlotSides
boxaPruneSortedOnOverlap
boxaRead
boxaReadMem
boxaReadStream
boxaReconcileEvenOddHeight
boxaRemoveBox
boxaRemoveBoxAndSave
boxaReplaceBox
boxaRotate
boxaRotateOrth
boxaSaveValid
boxaScale
boxaSelectByArea
boxaSelectBySize
boxaSelectRange
boxaSelectWithIndicator
boxaSetSide
boxaSimilar
boxaSizeRange
boxaSmoothSequenceLS
boxaSmoothSequenceMedian
boxaSort
boxaSort2d
boxaSort2dByIndex
boxaSortByIndex
boxaSplitEvenOdd
boxaSwapBoxes
boxaTransform
boxaTransformOrdered
boxaTranslate
boxaWindowedMedian
boxaWrite
boxaWriteMem
boxaWriteStream
boxaaAddBox
boxaaAddBoxa
boxaaAlignBox
boxaaCopy
boxaaCreate
boxaaDestroy
boxaaDisplay
boxaaExtendArray
boxaaExtendArrayToSize
boxaaExtendWithInit
boxaaFlattenAligned
boxaaFlattenToBoxa
boxaaGetBox
boxaaGetBoxCount
boxaaGetBoxa
boxaaGetCount
boxaaGetExtent
boxaaInitFull
boxaaInsertBoxa
boxaaJoin
boxaaQuadtreeRegions
boxaaRead
boxaaReadFromFiles
boxaaReadStream
boxaaRemoveBoxa
boxaaReplaceBoxa
boxaaSelectRange
boxaaSizeRange
boxaaWrite
boxaaWriteStream
ccbCreate
ccbDestroy
ccbaAddCcb
ccbaCreate
ccbaDestroy
ccbaDisplayBorder
ccbaDisplayImage1
ccbaDisplayImage2
ccbaDisplaySPBorder
ccbaGenerateGlobalLocs
ccbaGenerateSPGlobalLocs
ccbaGenerateSinglePath
ccbaGenerateStepChains
ccbaGetCcb
ccbaGetCount
ccbaRead
ccbaReadStream
ccbaStepChainsToPixCoords
ccbaWrite
ccbaWriteSVG
ccbaWriteSVGString
ccbaWriteStream
cidConvertToPdfData
composeRGBAPixel
composeRGBPixel
concatenatePdf
concatenatePdfToData
convertBinaryToGrayCode
convertByteToHexAscii
convertFilesFittedToPS
convertFilesTo1bpp
convertFilesToPS
convertFilesToPdf
convertFlateToPS
convertFlateToPSEmbed
convertFlateToPSString
convertG4ToPS
convertG4ToPSEmbed
convertG4ToPSString
convertGrayCodeToBinary
convertHSVToRGB
convertImageDataToPdf
convertImageDataToPdfData
convertJpegToPS
convertJpegToPSEmbed
convertJpegToPSString
convertLABToRGB
convertLABToXYZ
convertNumberedMasksToBoxaa
convertOnBigEnd16
convertOnBigEnd32
convertOnLittleEnd16
convertOnLittleEnd32
convertPtaLineTo4cc
convertRGBToHSV
convertRGBToLAB
convertRGBToXYZ
convertRGBToYUV
convertSegmentedFilesToPdf
convertSegmentedPagesToPS
convertSepCharsInPath
convertSortedToNumberedPathnames
convertTiffMultipageToPS
convertToNUpFiles
convertToNUpPixa
convertToPSEmbed
convertToPdf
convertToPdfData
convertToPdfDataSegmented
convertToPdfSegmented
convertUnscaledFilesToPdf
convertUnscaledToPdfData
convertXYZToLAB
convertXYZToRGB
convertYUVToRGB
create2dFloatArray
create2dIntArray
createMatrix2dRotate
createMatrix2dScale
createMatrix2dTranslate
decodeAscii85
decodeBase64
dewarpBuildLineModel
dewarpBuildPageModel
dewarpCreate
dewarpCreateRef
dewarpDebug
dewarpDestroy
dewarpFindHorizDisparity
dewarpFindVertDisparity
dewarpGetTextlineCenters
dewarpMinimize
dewarpPopulateFullRes
dewarpRead
dewarpReadStream
dewarpRemoveShortLines
dewarpShowResults
dewarpSinglePage
dewarpSinglePageInit
dewarpSinglePageRun
dewarpWrite
dewarpWriteStream
dewarpaApplyDisparity
dewarpaApplyDisparityBoxa
dewarpaCreate
dewarpaCreateFromPixacomp
dewarpaDestroy
dewarpaDestroyDewarp
dewarpaGetDewarp
dewarpaInfo
dewarpaInsertDewarp
dewarpaInsertRefModels
dewarpaListPages
dewarpaModelStats
dewarpaModelStatus
dewarpaRead
dewarpaReadStream
dewarpaRestoreModels
dewarpaSetCurvatures
dewarpaSetMaxDistance
dewarpaSetValidModels
dewarpaShowArrays
dewarpaStripRefModels
dewarpaUseBothArrays
dewarpaWrite
dewarpaWriteStream
displayHSVColorRange
distanceFunctionLow
ditherTo2bppLineLow
ditherTo2bppLow
ditherToBinaryLUTLow
ditherToBinaryLineLUTLow
ditherToBinaryLineLow
ditherToBinaryLow
dpixAddMultConstant
dpixChangeRefcount
dpixClone
dpixConvertToFPix
dpixConvertToPix
dpixCopy
dpixCopyResolution
dpixCreate
dpixCreateTemplate
dpixDestroy
dpixEndianByteSwap
dpixGetData
dpixGetDimensions
dpixGetMax
dpixGetMin
dpixGetPixel
dpixGetRefcount
dpixGetResolution
dpixGetWpl
dpixLinearCombination
dpixRead
dpixReadStream
dpixResizeImageData
dpixScaleByInteger
dpixSetAllArbitrary
dpixSetData
dpixSetDimensions
dpixSetPixel
dpixSetResolution
dpixSetWpl
dpixWrite
dpixWriteStream
encodeAscii85
encodeBase64
extractG4DataFromFile
extractMinMaxComponent
extractNumberFromFilename
extractRGBAValues
extractRGBValues
fgetJp2kResolution
fgetJpegComment
fgetJpegResolution
fgetPngColormapInfo
fgetPngResolution
fhmtautogen
fhmtautogen1
fhmtautogen2
fhmtgen_low_1
fileAppendString
fileConcatenate
fileCopy
fileCorruptByDeletion
fileCorruptByMutation
fileFormatIsTiff
filesAreIdentical
findFileFormat
findFileFormatBuffer
findFileFormatStream
findNextBorderPixel
findTiffCompression
fmorphautogen
fmorphautogen1
fmorphautogen2
fmorphopgen_low_1
fmorphopgen_low_2
fnbytesInFile
fopenReadStream
fopenWriteStream
fpixAddBorder
fpixAddContinuedBorder
fpixAddMirroredBorder
fpixAddMultConstant
fpixAddSlopeBorder
fpixAffine
fpixAffinePta
fpixAutoRenderContours
fpixChangeRefcount
fpixClone
fpixConvertToDPix
fpixConvertToPix
fpixConvolve
fpixConvolveSep
fpixCopy
fpixCopyResolution
fpixCreate
fpixCreateTemplate
fpixDestroy
fpixDisplayMaxDynamicRange
fpixEndianByteSwap
fpixFlipLR
fpixFlipTB
fpixGetData
fpixGetDimensions
fpixGetMax
fpixGetMin
fpixGetPixel
fpixGetRefcount
fpixGetResolution
fpixGetWpl
fpixLinearCombination
fpixPrintStream
fpixProjective
fpixProjectivePta
fpixRasterop
fpixRead
fpixReadStream
fpixRemoveBorder
fpixRenderContours
fpixResizeImageData
fpixRotate180
fpixRotate90
fpixRotateOrth
fpixScaleByInteger
fpixSetAllArbitrary
fpixSetData
fpixSetDimensions
fpixSetPixel
fpixSetResolution
fpixSetWpl
fpixThresholdToPix
fpixWrite
fpixWriteStream
fpixaAddFPix
fpixaChangeRefcount
fpixaConvertLABToRGB
fpixaConvertLABToXYZ
fpixaConvertXYZToLAB
fpixaConvertXYZToRGB
fpixaCopy
fpixaCreate
fpixaDestroy
fpixaDisplayQuadtree
fpixaGetCount
fpixaGetData
fpixaGetFPix
fpixaGetFPixDimensions
fpixaGetPixel
fpixaSetPixel
fprintTiffInfo
freadHeaderJp2k
freadHeaderJpeg
freadHeaderPng
freadHeaderPnm
freadHeaderSpix
freadHeaderTiff
gaussDistribSampling
gaussjordan
genPathname
genRandomIntegerInRange
genTempFilename
generateBinaryMaze
generateFlatePS
generateG4PS
generateJpegPS
generatePtaBox
generatePtaBoxa
generatePtaFilledCircle
generatePtaFilledSquare
generatePtaHashBox
generatePtaHashBoxa
generatePtaLine
generatePtaLineFromPt
generatePtaPolyline
generatePtaWideLine
generatePtaaBoxa
generatePtaaHashBoxa
generateUncompressedPS
getAffineXformCoeffs
getBilinearXformCoeffs
getCompositeParameters
getCutPathForHole
getExtendedCompositeParameters
getFilenamesInDirectory
getFormatExtension
getImagelibVersions
getImpliedFileFormat
getLeptonicaVersion
getLogBase2
getMorphBorderPixelColor
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 649KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 283B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ