General

  • Target

    tesseract-ocr-w64-setup-5.4.0.20240606.exe

  • Size

    47.9MB

  • MD5

    1c7cf7f130e29a8dab57b1243c0816f9

  • SHA1

    efd49b418a18cb8ebde62bc5073f5399a59d141e

  • SHA256

    c885fff6998e0608ba4bb8ab51436e1c6775c2bafc2559a19b423e18678b60c9

  • SHA512

    3a788044b7118d0f2cfc99800a6342e031295b0b1412151ddb635065872c0599d7743e7645e2223fcafff3203fb21446ace8306a2c091500eb139a7dbf6b9559

  • SSDEEP

    786432:sqbfWkSaTrlpBjNoaea0Kc2FDwtepd4sPJxw4rGZoZxHRj5hy1mAeId8cXm7zqQA:5bfWkSirlHNPVPIIxK4rEojhyAADsfh2

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 57 IoCs

    Checks for missing Authenticode signature.

Files

  • tesseract-ocr-w64-setup-5.4.0.20240606.exe
    .exe windows:4 windows x86 arch:x86

    96ab939b3b55d317ed1968d099ccc72c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    163fdad7b5f915e3a0ca7ad1d08b4ff8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    83778c6090bee55a4824200e5e2486ab


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    c20327fced07b6e73d2262fc88b11552


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    b844086d4b3e59aa7b4439d88bcb40cb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    decb956787d27b8d68f6baf3fdca54ed


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    c442f1649aa0670a32c622fadfcd00bd


    Headers

    Imports

    Exports

    Sections

  • ambiguous_words.1.html
    .html .js polyglot
  • ambiguous_words.exe
    .exe windows:4 windows x64 arch:x64

    ee95dce1a13098ff35b24b4400d23346


    Code Sign

    Headers

    Imports

    Sections

  • classifier_tester.1.html
    .html .js polyglot
  • classifier_tester.exe
    .exe windows:4 windows x64 arch:x64

    e3d0b851fef2944b6b15e0c5b7f4f330


    Code Sign

    Headers

    Imports

    Sections

  • cntraining.1.html
    .html .js polyglot
  • cntraining.exe
    .exe windows:4 windows x64 arch:x64

    30facafa6310533f4afbd713eec15412


    Code Sign

    Headers

    Imports

    Sections

  • combine_lang_model.1.html
    .html .js polyglot
  • combine_lang_model.exe
    .exe windows:4 windows x64 arch:x64

    3b8cfb6982a6fbeb03ec1b4bfd5b4c26


    Code Sign

    Headers

    Imports

    Sections

  • combine_tessdata.1.html
    .html .js polyglot
  • combine_tessdata.exe
    .exe windows:4 windows x64 arch:x64

    132c9b4bb94be13284118fca9cc82762


    Code Sign

    Headers

    Imports

    Sections

  • dawg2wordlist.1.html
    .html .js polyglot
  • dawg2wordlist.exe
    .exe windows:4 windows x64 arch:x64

    4b9169095a81e8d32789fdea401b4ae4


    Code Sign

    Headers

    Imports

    Sections

  • doc/AUTHORS
  • doc/LICENSE
  • doc/README.md
  • libLerc.dll
    .dll windows:4 windows x64 arch:x64

    1d09bc930007e2dfa841974287dad26e


    Headers

    Imports

    Exports

    Sections

  • libarchive-13.dll
    .dll windows:4 windows x64 arch:x64

    84879d4f38232cfc142dcd4a77aade27


    Headers

    Imports

    Exports

    Sections

  • libb2-1.dll
    .dll windows:4 windows x64 arch:x64

    5e31502d16d750dafd479730525144ed


    Headers

    Imports

    Exports

    Sections

  • libbrotlicommon.dll
    .dll .js windows:4 windows x64 arch:x64 polyglot

    ccb34e02e5bd568f952db5cabbf3e2a1


    Headers

    Imports

    Exports

    Sections

  • libbrotlidec.dll
    .dll windows:4 windows x64 arch:x64

    646984f614b7145be46e983790f786d5


    Headers

    Imports

    Exports

    Sections

  • libbz2-1.dll
    .dll windows:4 windows x64 arch:x64

    e00b6dcdd5a7b558ff801228a02812f5


    Headers

    Imports

    Exports

    Sections

  • libcairo-2.dll
    .dll windows:4 windows x64 arch:x64

    c3b7dc36292b4579eef3acc2634c04ff


    Headers

    Imports

    Exports

    Sections

  • libcrypto-3-x64.dll
    .dll windows:4 windows x64 arch:x64

    095fc15e4274d1d800e2fe00a63bb565


    Headers

    Imports

    Exports

    Sections

  • libdatrie-1.dll
    .dll windows:4 windows x64 arch:x64

    e853a179bd257232fa31cd9f3060afa2


    Headers

    Imports

    Exports

    Sections

  • libdeflate.dll
    .dll windows:4 windows x64 arch:x64

    57e4b293937137fe8b368c91843f8d69


    Headers

    Imports

    Exports

    Sections

  • libexpat-1.dll
    .dll windows:4 windows x64 arch:x64

    c8cbd75518d86b1b7eb03009865f7fd7


    Headers

    Imports

    Exports

    Sections

  • libffi-8.dll
    .dll windows:4 windows x64 arch:x64

    aa74fefb572e93c9b1dbf45714159546


    Headers

    Imports

    Exports

    Sections

  • libfontconfig-1.dll
    .dll windows:4 windows x64 arch:x64

    416771986ffede860ed9b1172d9f6d1d


    Headers

    Imports

    Exports

    Sections

  • libfreetype-6.dll
    .dll windows:4 windows x64 arch:x64

    c88cfb40f9cee6fc027d9a66a10467ac


    Headers

    Imports

    Exports

    Sections

  • libfribidi-0.dll
    .dll windows:4 windows x64 arch:x64

    9f793509a4039555e4fb79eb83df943c


    Headers

    Imports

    Exports

    Sections

  • libgcc_s_seh-1.dll
    .dll windows:4 windows x64 arch:x64

    8142ee0f45e10ebbff675b18dc67c93c


    Headers

    Imports

    Exports

    Sections

  • libgif-7.dll
    .dll windows:4 windows x64 arch:x64

    3622f2563aecfceae25b9090a66c92d8


    Headers

    Imports

    Exports

    Sections

  • libgio-2.0-0.dll
    .dll windows:4 windows x64 arch:x64

    5fb6cdde2fa9a64b96bad82be83e16e0


    Headers

    Imports

    Exports

    Sections

  • libglib-2.0-0.dll
    .dll windows:4 windows x64 arch:x64

    0f270ff17038453e57fafe379a147328


    Headers

    Imports

    Exports

    Sections

  • libgmodule-2.0-0.dll
    .dll windows:4 windows x64 arch:x64

    5e5d1f7a9afab7da0c4b6ab4fa00eea2


    Headers

    Imports

    Exports

    Sections

  • libgobject-2.0-0.dll
    .dll windows:4 windows x64 arch:x64

    23b09f579efb92cb2ff1cc855e852b3e


    Headers

    Imports

    Exports

    Sections

  • libgraphite2.dll
    .dll windows:4 windows x64 arch:x64

    1c86d7d1f427cc2a58bae5f8224c2ab4


    Headers

    Imports

    Exports

    Sections

  • libharfbuzz-0.dll
    .dll windows:4 windows x64 arch:x64

    1ad6e5781fb5080ecf1e223e9623d51f


    Headers

    Imports

    Exports

    Sections

  • libiconv-2.dll
    .dll windows:4 windows x64 arch:x64

    d1b707499a1dc5e6414f511e64677d6b


    Headers

    Imports

    Exports

    Sections

  • libicudt75.dll
    .dll windows:4 windows x64 arch:x64

    df00652ad3e78ba777ba702462655cf8


    Headers

    Imports

    Exports

    Sections

  • libicuin75.dll
    .dll windows:4 windows x64 arch:x64

    2744a1bea783971d8097983e6f2d326d


    Headers

    Imports

    Exports

    Sections

  • libicuuc75.dll
    .dll windows:4 windows x64 arch:x64

    f8aff2e386b162b29ce5506265551c47


    Headers

    Imports

    Exports

    Sections

  • libintl-8.dll
    .dll windows:4 windows x64 arch:x64

    b27b9ddbf928ae1646f6329a1abf21fd


    Headers

    Imports

    Exports

    Sections

  • libjbig-0.dll
    .dll windows:4 windows x64 arch:x64

    5211dbaa38aedf5d46dae5774bf59805


    Headers

    Imports

    Exports

    Sections

  • libjpeg-8.dll
    .dll windows:4 windows x64 arch:x64

    767122bc0d54c958225281934e599a71


    Headers

    Imports

    Exports

    Sections

  • libleptonica-6.dll
    .dll windows:4 windows x64 arch:x64

    48979da3ece7387f129c5a33ac333d76


    Headers

    Imports

    Exports

    Sections

  • liblz4.dll
    .dll windows:4 windows x64 arch:x64

    bbbd86e4d4d067baa755eb3c7ba6eb46


    Headers

    Imports

    Exports

    Sections

  • liblzma-5.dll
    .dll windows:4 windows x64 arch:x64

    549ca34b3de60e8fa4650fe575476566


    Headers

    Imports

    Exports

    Sections

  • libopenjp2-7.dll
    .dll windows:4 windows x64 arch:x64

    67188bf4eb850dc798bcc886a6573472


    Headers

    Imports

    Exports

    Sections

  • libpango-1.0-0.dll
    .dll windows:4 windows x64 arch:x64

    7333a7fffa070b6c61ac65993a8cc0c9


    Headers

    Imports

    Exports

    Sections

  • libpangocairo-1.0-0.dll
    .dll windows:4 windows x64 arch:x64

    063372ae3f70974d083336be5d46cd19


    Headers

    Imports

    Exports

    Sections

  • libpangoft2-1.0-0.dll
    .dll windows:4 windows x64 arch:x64

    abdd16ba79de373eb765a248607bd253


    Headers

    Imports

    Exports

    Sections

  • libpangowin32-1.0-0.dll
    .dll windows:4 windows x64 arch:x64

    a066eb834d4b6d33d1c87e1fd986706b


    Headers

    Imports

    Exports

    Sections

  • libpcre2-8-0.dll
    .dll windows:4 windows x64 arch:x64

    1d1fc411c386bc2819ac806dfb32676c


    Headers

    Imports

    Exports

    Sections

  • libpixman-1-0.dll
    .dll windows:4 windows x64 arch:x64

    435fdfb2139d1823d277e2e43e8240a7


    Headers

    Imports

    Exports

    Sections

  • libpng16-16.dll
    .dll windows:4 windows x64 arch:x64

    49e998f2d6fd304644cc98e8be6f9dbf


    Headers

    Imports

    Exports

    Sections

  • libsharpyuv-0.dll
    .dll windows:4 windows x64 arch:x64

    b3c750419d293b670926c8fb425cf2f6


    Headers

    Imports

    Exports

    Sections

  • libstdc++-6.dll
    .dll windows:4 windows x64 arch:x64

    17cb286551256a9d20eed4f5f72df6ae


    Headers

    Imports

    Exports

    Sections

  • libtesseract-5.dll
    .dll windows:4 windows x64 arch:x64

    3a1ad086ddc3a26ce22c728e42d44695


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libthai-0.dll
    .dll windows:4 windows x64 arch:x64

    26202e7d04d6e75e688f0ad90d88af3c


    Headers

    Imports

    Exports

    Sections

  • libtiff-6.dll
    .dll windows:4 windows x64 arch:x64

    06839c8aa0c3b055be51f5b026149df4


    Headers

    Imports

    Exports

    Sections

  • libwebp-7.dll
    .dll windows:4 windows x64 arch:x64

    07f586457df8e87d22c1255fde0dbeae


    Headers

    Imports

    Exports

    Sections

  • libwebpmux-3.dll
    .dll windows:4 windows x64 arch:x64

    67e6e0b5d413c78ae6b556a9dcef4f75


    Headers

    Imports

    Exports

    Sections

  • libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    66ac67ee3361426e84fbb1fe6d7e03c6


    Headers

    Imports

    Exports

    Sections

  • libzstd.dll
    .dll windows:4 windows x64 arch:x64

    0b4fe40a28e44dc6639c71e7b1f11fc2


    Headers

    Imports

    Exports

    Sections

  • lstmeval.1.html
    .html .js polyglot
  • lstmeval.exe
    .exe windows:4 windows x64 arch:x64

    0e97a65979bcfde6cd4ec2b0d7b5d0ab


    Code Sign

    Headers

    Imports

    Sections

  • lstmtraining.1.html
    .html .js polyglot
  • lstmtraining.exe
    .exe windows:4 windows x64 arch:x64

    b12ef37586de1fb6faba0596bca09043


    Code Sign

    Headers

    Imports

    Sections

  • merge_unicharsets.1.html
    .html .js polyglot
  • merge_unicharsets.exe
    .exe windows:4 windows x64 arch:x64

    72c3979771cc77e23a45a5dea2990e36


    Code Sign

    Headers

    Imports

    Sections

  • mftraining.1.html
    .html .js polyglot
  • mftraining.exe
    .exe windows:4 windows x64 arch:x64

    0015c403d6233b9227c5c6c19fab9827


    Code Sign

    Headers

    Imports

    Sections

  • set_unicharset_properties.1.html
    .html .js polyglot
  • set_unicharset_properties.exe
    .exe windows:4 windows x64 arch:x64

    c0a244b8854595a9e25a29ef3838f5af


    Code Sign

    Headers

    Imports

    Sections

  • shapeclustering.1.html
    .html .js polyglot
  • shapeclustering.exe
    .exe windows:4 windows x64 arch:x64

    13bbf41785c9e2ebb5ad201b733f5b99


    Code Sign

    Headers

    Imports

    Sections

  • tessdata/ScrollView.jar
    .jar
  • tessdata/configs/alto
  • tessdata/configs/ambigs.train
  • tessdata/configs/api_config
  • tessdata/configs/bigram
  • tessdata/configs/box.train
  • tessdata/configs/box.train.stderr
  • tessdata/configs/digits
  • tessdata/configs/get.images
  • tessdata/configs/hocr
  • tessdata/configs/inter
  • tessdata/configs/kannada
  • tessdata/configs/linebox
  • tessdata/configs/logfile
  • tessdata/configs/lstm.train
  • tessdata/configs/lstmbox
  • tessdata/configs/lstmdebug
  • tessdata/configs/makebox
  • tessdata/configs/page
  • tessdata/configs/pdf
  • tessdata/configs/quiet
  • tessdata/configs/rebox
  • tessdata/configs/strokewidth
  • tessdata/configs/tsv
  • tessdata/configs/txt
  • tessdata/configs/unlv
  • tessdata/configs/wordstrbox
  • tessdata/eng.traineddata
  • tessdata/eng.user-patterns
  • tessdata/eng.user-words
  • tessdata/jaxb-api-2.3.1.jar
    .jar
  • tessdata/osd.traineddata
  • tessdata/pdf.ttf
  • tessdata/piccolo2d-core-3.0.1.jar
    .jar
  • tessdata/piccolo2d-extras-3.0.1.jar
    .jar
  • tessdata/tessconfigs/batch
  • tessdata/tessconfigs/batch.nochop
  • tessdata/tessconfigs/matdemo
  • tessdata/tessconfigs/msdemo
  • tessdata/tessconfigs/nobatch
  • tessdata/tessconfigs/segdemo
  • tesseract.1.html
    .html .js polyglot
  • tesseract.exe
    .exe windows:4 windows x64 arch:x64

    6c0e91cb762d3c987d14f76dbad71bf5


    Code Sign

    Headers

    Imports

    Sections

  • text2image.1.html
    .html .js polyglot
  • text2image.exe
    .exe windows:4 windows x64 arch:x64

    e2e78dd72065659933c6347b3989eaf7


    Code Sign

    Headers

    Imports

    Sections

  • unicharambigs.5.html
    .html .js polyglot
  • unicharset.5.html
    .html .js polyglot
  • unicharset_extractor.1.html
    .html .js polyglot
  • unicharset_extractor.exe
    .exe windows:4 windows x64 arch:x64

    844cc492bb4573ab0316e0c12d8ff6e7


    Code Sign

    Headers

    Imports

    Sections

  • winpath.exe
    .exe windows:4 windows x64 arch:x64

    5dd4c21c759e349779fa8abd334db764


    Headers

    Imports

    Sections

  • wordlist2dawg.1.html
    .html .js polyglot
  • wordlist2dawg.exe
    .exe windows:4 windows x64 arch:x64

    8d9384cb0eeea015b4b458b517b12308


    Code Sign

    Headers

    Imports

    Sections

  • zlib1.dll
    .dll windows:4 windows x64 arch:x64

    0362b276bf74944aaf0d04f3240210cd


    Headers

    Imports

    Exports

    Sections