DevExpress[.]ExpressApp[.]Win[.]v10[.]1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.ExpressApp.Win.v10.1.dll
Size

677KB
MD5

09055a2187124b464728a610780c06a5
SHA1

8c1a96f619f20a3413d84091eea9ea91707cc1f9
SHA256

c50adce3e555f979b651a09532f6c411f3f400f44349ecb73eadc7a984edd0b9
SHA512

fefa9022de4980d75319b47b0f3fce35a7966ef9756f1352e6661669f035d0e68da73889fadc15151ba6094a9c316e8bbd482187ffbd1279dff2189c55748162
SSDEEP

12288:NCRfyqK7dnhh+ivbjnzfzL4EnUqLy+2b6E:ifylTvbTjjLL46E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.ExpressApp.Win.v10.1.dll

Files

DevExpress.ExpressApp.Win.v10.1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\10.1\BuildXaf\Temp\XAF.v10.1\Solution\DevExpress.ExpressApp.Win\obj\Release\DevExpress.ExpressApp.Win.v10.1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ