CrystalDecisions[.]Windows[.]Forms[.]dll | Triage

Sharing

General

Target

CrystalDecisions.Windows.Forms.dll
Size

540KB
MD5

ca52cbf15da7acb0057e143b3c07a31b
SHA1

a1608d8921501d81f729410d05e3a496fd599b69
SHA256

c591cd1ac3a2a672387e65c89a690828a31c3e0cfcd9bbab66b0ed60929f1d68
SHA512

93cf48d22bf67cf57ee9ad9495dfab9aea5eb74a6f32a3ff0efacb0a3d44adf7411cb6b63aaa8d215bcb2ea0f9f5b5eed9b6a68993807e8db295dd35f1536263
SSDEEP

6144:sjR4J9LcvZumjwpCweTTzyXS2wJF5uPxDINWS/zoD2+DQNgb/FOBc:CR4HcvZu4wpCJ2w3Aue9+q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CrystalDecisions.Windows.Forms.dll

Files

CrystalDecisions.Windows.Forms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\crel\win32_x86\release\bin\crystalreports.sdk.dotnet\dotnet3\CrystalDecisions.Windows.Forms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 528KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ