c:\Projects\10.1\BuildLabel\Temp\NetStudio.v10.1.2005\DevExpress.XtraScheduler\DevExpress.XtraScheduler.OutlookExchange\obj\Release\DevExpress.XtraScheduler.v10.1.OutlookExchange.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DevExpress.XtraScheduler.v10.1.OutlookExchange.1.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DevExpress.XtraScheduler.v10.1.OutlookExchange.1.dll
Resource
win10v2004-20240802-en
General
-
Target
DevExpress.XtraScheduler.v10.1.OutlookExchange.1.dll
-
Size
47KB
-
MD5
7a102f7480bcbd0cd2afa5dd7e6b9b88
-
SHA1
b3fa603506d4f933bc8553df1916b9f583ab31d5
-
SHA256
bc6c54a240e9bac0803cc05cee21b45dca930653a731c5fccc55c52c39f3bf62
-
SHA512
f26591e2776a82944f67ba5d9d4d5f976a99373d0dc90aedc3b694e5e7a970849e1f3c7f9d037844c896df2e1c645d4b6bfa1e37d1110bfa2b147a7bc7887941
-
SSDEEP
768:PI9E/lBUd1M+P7DY6KICiLqiiiccIGq6mofb0SQwIttC5u8YpJ/BeEk2MuL:P6EtBUdO+PfYtMBAofWC+eEJxL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DevExpress.XtraScheduler.v10.1.OutlookExchange.1.dll
Files
-
DevExpress.XtraScheduler.v10.1.OutlookExchange.1.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ