DevExpress[.]XtraSpellChecker[.]v10[.]1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.XtraSpellChecker.v10.1.dll
Size

247KB
MD5

538ce05c7b25b1ef474eda96e7de30bd
SHA1

19d4acb67a1153bb6a8ef39662a74d6b4050ec88
SHA256

4a04bc9fa24ba2d443abf9da8ece5801383300e7a019fa9007ee26befdb3c536
SHA512

eaa4538b49ab926fe359743ae1425eba8dccc92023dfd9a638b227b20dfe97f71258feaf9a4d00e2e560de939a306e9134f70e66fa000329692a7775326c3126
SSDEEP

3072:PBe0aBCi0UWSYWFzUrt+0fG1HNLIdPRdm6PmsInKiKOwWQ6o8xGnApBwMUbMWqsW:YAzIFzUJE06oCpB0gWM7soW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.XtraSpellChecker.v10.1.dll

Files

DevExpress.XtraSpellChecker.v10.1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\10.1\BuildLabel\Temp\NetStudio.v10.1.2005\DevExpress.XtraSpellChecker\DevExpress.XtraSpellChecker\obj\Release\DevExpress.XtraSpellChecker.v10.1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ