DevExpress[.]BonusSkins[.]v10[.]1[.]dll | Triage

Sharing

General

Target

DevExpress.BonusSkins.v10.1.dll
Size

5.0MB
MD5

c0c668c567fdfeca3f0768922c75dcb8
SHA1

07110912ca9cbbc0c04f1b971ef6fb51a101faeb
SHA256

cc7d85c85b27d50f19831bcb3d7031fcdbb44d8ae42d2e1f8f192a2f9126cc3d
SHA512

5ae52816fbb83faf9a53ad5be25ee08bf0424d3b3f1514cd3186c82a6958329b3aac3f865b3bee6c3850098486d1a7304c4f61c25b320aac2ae14be53b4a7d0e
SSDEEP

98304:AvQ8JyAqA6tMA0s18NYyMlOJJKAYUFcJmMWi:AvQ6KSs17fCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.BonusSkins.v10.1.dll

Files

DevExpress.BonusSkins.v10.1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\10.1\BuildLabel\Temp\NetStudio.v10.1.2005\BonusSkins\obj\Release\DevExpress.BonusSkins.v10.1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ