DevExpress[.]XtraSpellChecker[.]v14[.]1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.XtraSpellChecker.v14.1.dll
Size

242KB
MD5

edd67daa094b8ae900fffdca688bd2bd
SHA1

1180c327847a5bbb10cbd64cf1160ef6d8a0deab
SHA256

4018a3d143a37be3dba823b9e9aca7b90eb1222235bb05a0a0398ad3b1be60ef
SHA512

8405df73bc23f864ac9377d3b0279c2b5e946280db1dd3da058f96e9f0c23b7672fb81dcf72221e82b805a0643abcbd4f9fdffd905f77d9aac50b0f62b193fac
SSDEEP

3072:TsnblGbjb42XJA6pvLIdPRdm6PmsInKFBg1UV/ZH2I2hqGGze5WYCkxLQGkelNrY:T5bE6xLPLNSYtW9soWc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.XtraSpellChecker.v14.1.dll

Files

DevExpress.XtraSpellChecker.v14.1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\14.1\Build\Temp\NetStudio.v14.1.2005\Win\DevExpress.XtraSpellChecker\DevExpress.XtraSpellChecker\obj\Release\DevExpress.XtraSpellChecker.v14.1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ