DevExpress[.]XtraScheduler[.]v14[.]1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.XtraScheduler.v14.1.dll
Size

1.7MB
MD5

723b03ced8d7a1f75a886e4940884e5b
SHA1

3b98de5bc4a42bfe5482833bc724e536ac5c0798
SHA256

b1063d975ae8b017aa56d2d0d2ddf96844c7d572bd487feaaa08ef4a4f037f13
SHA512

97ea2dc5b18ba8bef02a424af432be473993b843727d0477f03b9f50780fcb8bca41a6b102f90008e1586173e5f30bce78e1c80db895288c04edf883805c0ccd
SSDEEP

24576:ku/N3ycjuxdRRtItO/4lIsnCxzsYbTPUokJaYr2G1yEFM4IjtuN18Q:5oxdzsYbT6r2G1yEFM4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.XtraScheduler.v14.1.dll

Files

DevExpress.XtraScheduler.v14.1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\14.1\Build\Temp\NetStudio.v14.1.2005\Win\DevExpress.XtraScheduler\DevExpress.XtraScheduler\obj\Release\DevExpress.XtraScheduler.v14.1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ