DevExpress[.]SharePoint[.]WSS[.]v10[.]1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.SharePoint.WSS.v10.1.dll
Size

196KB
MD5

a4b8be4b17b68ec4ea47839afeb37083
SHA1

1ea789c181e5dca460d633194ed37474192c41e8
SHA256

48774707ad7fe518096a0e3b0f658ba53dabc2418cfe914bda18cae8ff1e9ef4
SHA512

04084184126c640cbc6f7c6ff66206764a9d850b164f20bb0c203a233fb35c98773788754652da6d938f0deb95412ff6f1742aa0ed309e5f330414fff0332651
SSDEEP

3072:wzMkZjIqw2YO7Q8CKrqK5/fSfPqanRsJ7t2Mktqw2YfQfnsqqK5u2UR0oL6MkZjl:/eiB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.SharePoint.WSS.v10.1.dll

Files

DevExpress.SharePoint.WSS.v10.1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\10.1\BuildLabel\Temp\NetStudio.v10.1.2005\DevExpress.SharePoint.WSS\obj\Release\DevExpress.SharePoint.WSS.v10.1.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ