MshtmlDac[.]dll | Triage

Sharing

General

Target

MshtmlDac.dll
Size

62KB
MD5

025edd1a0caed7c0539b8fe1dc44aafc
SHA1

06defae26351aaba89ccdf23025da8ddb5689cd4
SHA256

22c0b4d6f880bbdb4d5e3df7295bcbd36f8ada3f0978a3d3f6f01eebedc31752
SHA512

538f7190f1b8b7557528ba539eef23e35efa3a5cbf7e0b227eb4331c71b1dcf22e2db2ed266f226114d543f1ef0ba3ae0f51268b8cbe76e2e10dafec7ea66c7a
SSDEEP

768:IILfkvX9TUoyt5JqzsQj4nUDCYzrOiuevFR24cEajE//0mYOkh9d3ijoG:b8vXRUoyJQjDpzrOihFRpajEUd3i0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MshtmlDac.dll

Files

MshtmlDac.dll
.dll windows:6 windows x86 arch:x86

b1dddb91bc7296955205cc79cfc391ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

MshtmlDac.pdb

Imports

msvcrt

_initterm
_except_handler4_common
malloc
free
_amsg_exit
_XcptFilter
memset

kernel32

GetCurrentProcess
HeapFree
HeapAlloc
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
RaiseFailFastException
GetProcessHeap
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
GetVersion
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter

oleaut32

SysAllocString
SysFreeString

Exports

Exports

DllGetClassObject

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ