Static task
static1
Behavioral task
behavioral1
Sample
DevExpress.Localization.v9.2.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DevExpress.Localization.v9.2.dll
Resource
win10v2004-20240426-en
General
-
Target
DevExpress.Localization.v9.2.dll
-
Size
216KB
-
MD5
d0ea5ec1389663a4fa1ee50c14bee1ae
-
SHA1
27c57ec5c5673c7283dbb4eded400c3d9b741903
-
SHA256
6a57469759506edea2536c48b45685ed0757b7226a37ce34b3f843e413588fda
-
SHA512
56d877d01611955d9591a2385e0c1e90b27555b798d0f82e4f7fba88cde2d36ca7ac82ec533d00b29cb39bec19f19e30a999d5ba7f2670420f198f67a36194b4
-
SSDEEP
3072:Zk4kqJ3kCnlvzy03511ufMsXFJPWzW2vH0n3av7d93Nhf/+lAMx:Zk4TJ3kC1zJp11ufMo6vUnS7TfGl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DevExpress.Localization.v9.2.dll
Files
-
DevExpress.Localization.v9.2.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 204KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ