FastReport[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FastReport.dll
Size

3.0MB
MD5

cfca013a081ef7ded4818ceaacaa542e
SHA1

7411c699b417b64cae5f953fad4e334dbe6c26c8
SHA256

8ef4457667630a224053e3fc5afa91b1efd52c01f2081e5d27578f75504e8812
SHA512

551ee103992c23eace2e4bbc977e4727d45c15d3c64e8b645543218764ee89761f8e84209de69a988dbe515445df547b94a77a5a6a4f27b5befdb64f62e5ea63
SSDEEP

24576:AHJIDLLKlRZQKyykuPblxawpw/4FU34WJFUp/NHHQs8sgDtwWFtNYlNfaLp7peKt:tKL8k9wns6N8IVpec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FastReport.dll

Files

FastReport.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\AutoBuild\_net\frdotnet\FastReport\obj\Demo\FastReport.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ