TeX2img_2[.]1[.]0[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

TeX2img_2.1.0.zip
Size

6.3MB
MD5

12008ecf5c22011ba6f0c86f8337be6b
SHA1

40b011fcb5311942300cbfe730fe187678bc10e5
SHA256

330347b0883066390edf5949e4de07ec47aa264f83c3f4f634426bb92e86692b
SHA512

be266d07729de150eb89422e96e8b33fec3942d1e734a1dc6465b0ecb23cf8f870aad4515fcf59e72a91134d7f784eb1a8164777505afdd3e6e21f3e78fd5d83
SSDEEP

98304:E1WyDlTbUEWU6x1B3gi03PYaikpey+HAbpNPTN4IdHTec+4RXCcSv6maV:Al9G1B3gi00kpe07bN/dHTec+UCtM

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TeX2img/Azuki.dll
unpack001/TeX2img/TeX2img.exe
unpack001/TeX2img/TeX2imgc.exe
unpack001/TeX2img/ja-JP/TeX2img.resources.dll
unpack001/TeX2img/mudraw.exe
unpack001/TeX2img/pdfiumdraw.exe

Files

TeX2img_2.1.0.zip
.zip
TeX2img/Azuki.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TeX2img/TeX2img-ja.txt
TeX2img/TeX2img.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Abe_Noriyuki\Documents\vs\TeX2img\obj\Release\TeX2img.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TeX2img/TeX2img.exe.config
.xml
TeX2img/TeX2img.txt
TeX2img/TeX2imgc.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Abe_Noriyuki\Documents\vs\TeX2img\TeX2imgc\obj\Release\TeX2imgc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TeX2img/TeX2imgc.exe.config
.xml
TeX2img/hist_old.txt
TeX2img/ja-JP/TeX2img.resources.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TeX2img/license.txt
TeX2img/mudraw.exe
.exe windows:5 windows x86 arch:x86

1aafae5fca7855f7b619dded45d2b2fe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\app\sumatrapdf_src\rel\mudraw.pdb

Imports

kernel32

lstrcmpA
GetSystemTimeAsFileTime
FindFirstFileW
GetFullPathNameW
FindNextFileW
lstrcpynW
InterlockedCompareExchange
GetModuleFileNameW
FindClose
Sleep
GetLastError
GetWindowsDirectoryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
WideCharToMultiByte
RtlUnwind
FreeLibrary
LoadLibraryExW
QueryPerformanceFrequency
CreateFileW
GetFileType
ExitProcess
GetModuleHandleExW
ReadFile
HeapAlloc
HeapReAlloc
HeapFree
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetACP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
GetConsoleCP
SetEndOfFile
FlushFileBuffers
GetProcessHeap
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
WriteConsoleW
HeapSize
RaiseException
MultiByteToWideChar

advapi32

SystemFunction036

ole32

CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
CoInitialize

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data:
Size: 733KB - Virtual size: 733KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TeX2img/pdfiumdraw.exe
.exe windows:5 windows x86 arch:x86

eabfb2718bd94c7663a3a513da33e1a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Abe_Noriyuki\Documents\VS\TeX2img\bin\Release\pdfiumdraw.pdb

Imports

shlwapi

PathFindExtensionA
SHCreateStreamOnFileA
PathFindFileNameA

kernel32

EncodePointer
GetProcessHeap
RaiseException
InitOnceExecuteOnce
DuplicateHandle
CreateProcessA
GetCommandLineA
GetModuleFileNameA
CreatePipe
GetExitCodeProcess
WaitForMultipleObjects
ResumeThread
SetThreadPriority
GetThreadPriority
GetCurrentThread
OpenThread
GetTempFileNameA
GetTempPathA
DeleteCriticalSection
CreateThread
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
InitializeCriticalSection
WaitForSingleObject
SetEvent
CreateEventW
CloseHandle
Sleep
OutputDebugStringA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
DebugBreak
GetACP
SetLastError
LoadLibraryA
GetSystemDirectoryA
FreeLibrary
GetVersionExW
GetWindowsDirectoryA
MultiByteToWideChar
GetCurrentDirectoryA
lstrlenA
IsWow64Process
GetCurrentProcess
GetSystemTime
GetCurrentProcessId
GetProcAddress
GetModuleHandleW
VirtualFree
GetLastError
VirtualAlloc
SwitchToThread
GetFileSizeEx
CreateFileA
SetEndOfFile
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
SetEnvironmentVariableA
DecodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlUnwind
LoadLibraryExW
VirtualQuery
ReadFile
ExitProcess
GetModuleHandleExW
GetTimeZoneInformation
GetDriveTypeW
GetFullPathNameA
CreateFileW
GetFileType
SetStdHandle
WriteFile
GetCommandLineW
GetConsoleMode
ReadConsoleW
GetConsoleCP
HeapAlloc
HeapReAlloc
HeapFree
FlushFileBuffers
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetFilePointerEx
DeleteFileW
GetCurrentDirectoryW
HeapSize
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW

user32

ReleaseDC
GetDC
FillRect

gdi32

GetCharWidthW
GetOutlineTextMetricsW
GdiComment
GetRegionData
GetClipRgn
CreateFontIndirectA
GetTextMetricsW
GetFontData
GetTextFaceA
CreateFontA
EnumFontFamiliesExA
DeleteDC
GetDIBits
BitBlt
CreateCompatibleBitmap
CreatePen
WidenPath
SelectClipPath
IntersectClipRect
EndPath
CloseFigure
PolyBezierTo
BeginPath
ExtCreatePen
StrokeAndFillPath
StrokePath
FillPath
SetPolyFillMode
SetMiterLimit
LineTo
MoveToEx
SetDIBitsToDevice
StretchDIBits
RestoreDC
SaveDC
GetDeviceCaps
GetObjectW
CreateBitmap
GetObjectType
SetStretchBltMode
EnumEnhMetaFile
SelectObject
CreateDIBSection
CreateCompatibleDC
CloseEnhMetaFile
GetStockObject
GetClipBox
SetWindowExtEx
GetWinMetaFileBits
DeleteEnhMetaFile
PlayEnhMetaFileRecord
CreateRectRgn
SetBkMode
SelectClipRgn
CreateEnhMetaFileA
DeleteObject
CreateSolidBrush
SetMapMode

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TeX2img/pdfiumdraw.txt

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 212KB - Virtual size: 208KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rsrc Size: 354KB - Virtual size: 353KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 512B - Virtual size: 12B

1aafae5fca7855f7b619dded45d2b2fe

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

ole32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.data: Size: 733KB - Virtual size: 733KB

.rdata Size: 2.2MB - Virtual size: 2.2MB

.data Size: 116KB - Virtual size: 141KB

.gfids Size: 1024B - Virtual size: 916B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 55KB - Virtual size: 54KB

eabfb2718bd94c7663a3a513da33e1a3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

gdi32

ole32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 16KB - Virtual size: 33KB

.text
Size: 212KB - Virtual size: 208KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 2.7MB - Virtual size: 2.7MB

.rsrc
Size: 354KB - Virtual size: 353KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2.1MB - Virtual size: 2.1MB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.4MB - Virtual size: 1.4MB

.data:
Size: 733KB - Virtual size: 733KB

.rdata
Size: 2.2MB - Virtual size: 2.2MB

.data
Size: 116KB - Virtual size: 141KB

.gfids
Size: 1024B - Virtual size: 916B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 55KB - Virtual size: 54KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 16KB - Virtual size: 33KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 55KB - Virtual size: 54KB