MshtmlDac[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MshtmlDac.dll
Size

62KB
MD5

02d75dd5433a8a529b3ef1c8ee9e9891
SHA1

4f67310439ef62aa6b52929fa2c72d5a15c99fb2
SHA256

f58f01a838e3e9492ba860d931c6a2afb3fd4b89b9ccfdaa28f143841e7f12d1
SHA512

2d7b8f359ee8c9e09037cd7a7c69ecab1ab35a2db81c074484af3ffb95cae0a52c54be9d50f5fb158b25bf26a6cb3e51cf950200ec877fa467385fc3689ba4aa
SSDEEP

768:IIEfkvX9TUoyt5JqzpQj4nUDCYzrOAVeefFR2ocEajE//0mYhkh9pDjoG:08vXRUoyUQjDpzrOAVxFR5ajEJpD0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MshtmlDac.dll

Files

MshtmlDac.dll
.dll windows:6 windows x86 arch:x86

b1dddb91bc7296955205cc79cfc391ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

MshtmlDac.pdb

Imports

msvcrt

_initterm
_except_handler4_common
malloc
free
_amsg_exit
_XcptFilter
memset

kernel32

GetCurrentProcess
HeapFree
HeapAlloc
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
RaiseFailFastException
GetProcessHeap
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
GetVersion
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter

oleaut32

SysAllocString
SysFreeString

Exports

Exports

DllGetClassObject

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ