DevExpress[.]XtraRichEdit[.]v9[.]2[.]Printing[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.XtraRichEdit.v9.2.Printing.dll
Size

22KB
MD5

0af17ee4252ca8c11a13d61c61603850
SHA1

93d0b6aee27e6b50d397a130719f06a58707dcdb
SHA256

109b0b333c5e8f34e13ea3e11fa62526294abe5dfcc9fff1478583f830d18e36
SHA512

ab5b2d6dbaaae11632012c897ee84008cfec5257923d9def54ffbda9eb1d3481a8cbb86faf9b2ea1e49ea62be8476cb1ba4bf46bb5db43e4fdf1f5de9808cefb
SSDEEP

384:yAw4w5g+fA0PRqQ5URY+mFqkdtzhSwLT/p9:dN+fBpq3MbMwLT7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.XtraRichEdit.v9.2.Printing.dll

Files

DevExpress.XtraRichEdit.v9.2.Printing.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Projects\BuildLabel.v9.2\Temp\NetStudio.v9.2.2005\DevExpress.XtraRichEdit\DevExpress.XtraRichEdit.Printing\obj\Release\DevExpress.XtraRichEdit.v9.2.Printing.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ