DevExpress[.]Xpo[.]v10[.]1[.]Providers[.]Compact[.]dll | Triage

Sharing

General

Target

DevExpress.Xpo.v10.1.Providers.Compact.dll
Size

29KB
MD5

b49e4cb87c694cb56f568c76347bbf9e
SHA1

b629841fb280bfbade381ffe1b7cebf04be4b2b3
SHA256

3b37171f06f46db735a498fbbf7f7c8f8cb8d667279fc44cebbd14e2d7183822
SHA512

7e3dea6eadecf386ecc2b38ca4a909390d0d377dd81284967b385add750be43327cc45c8a77a363fc0370fc030ec94bcf7e2c26498e01459b609d6b774d1ad54
SSDEEP

384:i//4QXtq1tRag/hio4B/o37+CHJrRhvuzHXTCzcV0IJTH2:inNkRHhioW/6+0H5uzGcmIhW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.Xpo.v10.1.Providers.Compact.dll

Files

DevExpress.Xpo.v10.1.Providers.Compact.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\10.1\BuildLabel\Temp\NetStudio.v10.1.2005\DevExpress.Xpo\DevExpress.Xpo.Providers\obj\Release\DevExpress.Xpo.v10.1.Providers.Compact.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ