DevExpress[.]Pdf[.]v14[.]1[.]Core[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.Pdf.v14.1.Core.dll
Size

761KB
MD5

4a5ed570927a075491171100609b40a5
SHA1

2005b7bf4db1321c13250d0cf2b1a4b81f1b156b
SHA256

5bc0ea80b26d5960239b2b8981b71e984048aa2269ff5fcc565e22974a57c7e8
SHA512

1b97d3aefe2debf58ca7140f697a601b1371fbfb2b005a7519c0e072bea12217150049c71085cd8ddf064253a314ed7191ec5264112a34d09e31e8885e1e97f7
SSDEEP

12288:UnJLFgTqS2M1rvV2WZrqhjg592FMHZcCub3q2plY2rad4x04K8xYJ:CVFgTqSj1x2W5qhjk92Ktudlpad4bK8g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.Pdf.v14.1.Core.dll

Files

DevExpress.Pdf.v14.1.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\14.1\Build\Temp\NetStudio.v14.1.2005\Win\DevExpress.Pdf\DevExpress.Pdf.Core\obj\Release\DevExpress.Pdf.v14.1.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 759KB - Virtual size: 758KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ