CrystalDecisions[.]ReportAppServer[.]Prompting[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CrystalDecisions.ReportAppServer.Prompting.dll
Size

152KB
MD5

4c6b0665c61234993a09a2d4a4216e62
SHA1

7bd913b45b8a00b6a69f7f9327c516c16ee4b856
SHA256

8b69fce8a3334fd8980472058187d6546352cd658c72feb40aa21974087676fa
SHA512

fa9a4cc8fb543ac0f9e756c10b9be78f6877704eeb968ab15ff13417330f8644e095f82bf3a967f6c98b153f154713816cecd45af0f8d174121e62d59eb90f57
SSDEEP

1536:CNvOG1uDcxK/swR958o75+nYlFXvEJGvPi1wHL/bb1EUSx609y0N1HBBhuLzNndQ:mOG1uDcxK/sk/k1JGVHOBN1LuccZ4hj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CrystalDecisions.ReportAppServer.Prompting.dll

Files

CrystalDecisions.ReportAppServer.Prompting.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

CrystalDecisions.ReportAppServer.Prompting.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ