CrystalDecisions[.]CrystalReports[.]Engine[.]dll | Triage

Sharing

General

Target

CrystalDecisions.CrystalReports.Engine.dll
Size

372KB
MD5

97e22aff49523e704633da496c2570fe
SHA1

664683440e9895b4775e54bfb812d61f2725f658
SHA256

d8c5a963927b852671eed6225db0604cfd0406bf0ae6c2173ec3f532b6add9f1
SHA512

78bf560e06afd691a72141e22420ea2c761a39048b13d653792cbdd71d5db7675b553478d3e7912379ce0e35e5a5c2e8d1f4163a1fe5e38b379013df5f51b61d
SSDEEP

6144:+nAkSPYqO62qamnJGIJVE6P+Od6aN7mKIAVAbUbI065fXcVFGj9WjFXZ:uDqO62qamQIE9O0aN7vIA4065fCjFX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CrystalDecisions.CrystalReports.Engine.dll

Files

CrystalDecisions.CrystalReports.Engine.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\crel\win32_x86\release\bin\crystalreports.sdk.dotnet\dotnet3\CrystalDecisions.CrystalReports.Engine.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 360KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ