DevExpress[.]XtraScheduler[.]v9[.]2[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.XtraScheduler.v9.2.Core.dll
Size

737KB
MD5

f4ff0d2c0403b45d9a4303961629fd2e
SHA1

55c7ffa115efaebf3055ba67f4c4442d47390685
SHA256

3dadd1ad903af6c3e07a22e27608a48c9c79463a9cf0ced3c15d148c2f274e20
SHA512

bbefebe16f5d291d40d017e3efee166e7377bdea649878b8728cbacef79a801c9e7e7981eec7cf8bd4a67c26306a9131a1c3f9d8688e8e5458daef87fd707dea
SSDEEP

6144:IkAvj8g7/3MHxYyTTsSETMLeKnlL0+FwMseMUCYmbYOddewDA7ndZ3XdRM89AEyS:JCIYEHSyTvlLFsdpddS7n3Ni8bETZJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.XtraScheduler.v9.2.Core.dll

Files

DevExpress.XtraScheduler.v9.2.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Projects\BuildLabel.v9.2\Temp\NetStudio.v9.2.2005\DevExpress.XtraScheduler\DevExpress.XtraScheduler.Core\obj\Release\DevExpress.XtraScheduler.v9.2.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 735KB - Virtual size: 734KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ