DevExpress[.]Xpo[.]v10[.]1[.]Linq[.]1[.]dll | Triage

Sharing

General

Target

DevExpress.Xpo.v10.1.Linq.1.dll
Size

62KB
MD5

1fb0eb1d79585502b0a21807e51f3989
SHA1

7fbdb28368a9e9e406117743aaa566b0cb0b85cf
SHA256

bfd076a8740484606eee57af9cc94f34c4dc902bc426307dcfc69781cb1febe2
SHA512

f5ba4bff34a00722522ffcb392b321ba4bf5649ac5b0d964fe065d21f4dafefc6f730ff19cca66aa731802cf598dfef16e7ba09a651361b65cae17ee7c34168b
SSDEEP

1536:N3oCnC3E8g3xM43wjNAbHGMWT2qbzjDKBn8t4GyrE7NIog:yCnC9aMoHGdzyn8t4VE7NIog

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.Xpo.v10.1.Linq.1.dll

Files

DevExpress.Xpo.v10.1.Linq.1.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\10.1\BuildLabel\Temp\NetStudio.v10.1.2005\DevExpress.Xpo\DevExpress.Xpo.Linq\obj\Release\DevExpress.Xpo.v10.1.Linq.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ