DevExpress[.]XtraReports[.]v10[.]1[.]Web[.]1[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

DevExpress.XtraReports.v10.1.Web.1.dll
Size

172KB
MD5

ad3eb7b4c5ad540e655fdbddebff0482
SHA1

785c8c4af3b40d500c824e63cb4460333444f642
SHA256

9b846ca67adbd2c937d947c43ac6d65145b0221f09225f78ab8dce7374c4fbb6
SHA512

c541e08326999f59dd94d2a8f7750ee4a4710bf0073f16627b3827151376c4c7f33963397e40ba4b4a64357611f12b230345a27cca60eb4247b60b7499735deb
SSDEEP

3072:qBnKfNf0dMXMboqwwKyoQK4KTcfz+N6qYC4A+Pw:qBKFf0dMXpGz/CJo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DevExpress.XtraReports.v10.1.Web.1.dll

Files

DevExpress.XtraReports.v10.1.Web.1.dll
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Projects\10.1\BuildLabel\Temp\NetStudio.v10.1.2005\DevExpress.XtraReports.Web\obj\Release\DevExpress.XtraReports.v10.1.Web.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ