MshtmlDac[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MshtmlDac.dll
Size

62KB
MD5

46e8336d3b98e43b9ee8911ce48d8afc
SHA1

725f8c9da82dcda790b9933a130ec54a2a3eb3ac
SHA256

0e5713a7bdb51408e2de07f07ab0d9b742ae256d0bb3752e33db513e4a931249
SHA512

93cda14e376175086ccbceab737eb9ce3d56a7c4c19a8648bbb86f530aa10e7580e2095fdc6550cb222966097ad57366e573d7892d1687f52a609a693e81f279
SSDEEP

768:IIGfkvX9TUoyt5JqzPQ/gb8DCYX/yyyGXFR24h+Hg//0mY9kh9YgjoG:W8vXRUoyaQ/XpX/yyFFRl+HgRYg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MshtmlDac.dll

Files

MshtmlDac.dll
.dll windows:6 windows x86 arch:x86

b1dddb91bc7296955205cc79cfc391ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

MshtmlDac.pdb

Imports

msvcrt

_initterm
_except_handler4_common
malloc
free
_amsg_exit
_XcptFilter
memset

kernel32

GetCurrentProcess
HeapFree
HeapAlloc
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
RaiseFailFastException
GetProcessHeap
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
GetVersion
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter

oleaut32

SysAllocString
SysFreeString

Exports

Exports

DllGetClassObject

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ