DevExpress[.]SharePoint[.]2010[.]v10[.]1[.]1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.SharePoint.2010.v10.1.1.dll
Size

196KB
MD5

11d9cdec4df9e0dbb72ae1135936dffa
SHA1

1815300906c19dad3aa4a2bfe1c6b8aedb7ca539
SHA256

c8bdbf22e7b600d77d1ff8b16d0e0e78f865fb99e85485a6301cb893f7c78883
SHA512

b983c71951d0c4e1b311e6914e0bb004237991dcc2ea580e286be453bad978216084f20ec443258fb81278412facb0dfed7efdf703690161cb1ef971d5f4a3a5
SSDEEP

3072:nM8MkZjIqw2YO7Q8CKrqK5/fSfPqanRsJ7t2Mktqw2YfQfnsqqK5u2UR0oL6MkZ7:MSyL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.SharePoint.2010.v10.1.1.dll

Files

DevExpress.SharePoint.2010.v10.1.1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\10.1\BuildLabel\Temp\NetStudio.v10.1.2005\DevExpress.SharePoint.2010\obj\Release\DevExpress.SharePoint.2010.v10.1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ