DevExpress[.]SharePoint[.]MOSS[.]v10[.]1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.SharePoint.MOSS.v10.1.dll
Size

162KB
MD5

d0a0f260a72b1364e62f3102ca0d2c0a
SHA1

b9ae8a62943d7a969a114251887c9bbef6bfd1ef
SHA256

949928109189e4468fdd2680e7ed599d14d4b21ef1908338fc1f82ea1ac6a87a
SHA512

03163306bcf9d362dbdd21649142fcd32ad79526846057d1badbcfc6e35852b2469ac7d1afa5fc448301e666add23ccf631ea652312766befe30dd6a261c097a
SSDEEP

3072:8MkZjIqw2YO7Q8CKrqK5/fSfPqanRsJ7t2Mktqw2YfQfnsqqK5u2UR0oL6MkZjIP:

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.SharePoint.MOSS.v10.1.dll

Files

DevExpress.SharePoint.MOSS.v10.1.dll
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\10.1\BuildLabel\Temp\NetStudio.v10.1.2005\DevExpress.SharePoint.MOSS\obj\Release\DevExpress.SharePoint.MOSS.v10.1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ