MshtmlDac[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MshtmlDac.dll
Size

62KB
MD5

8876b069318ba2d85c0c12a646804774
SHA1

35cc8321062c3d5cf4a49639486aa63708aeb339
SHA256

ea1a75aeab3dfcd9d3039533c09d2bd68c64c1d1462bb31f4786e713b9882b86
SHA512

18d2aa6c625ee1f0b0509521a6dab998fc57f15d5b424357552a51da3eae43b50723a60e2cb63d86447297a96b597b89d6a46674d4e213b61be16f7a20650d84
SSDEEP

768:+teVJCZTUoyt5Jqz1pHGZODhS3eqMS7nRnhw7sFhTi4pivlM4R:5VIdUoyopHhuMmbw7K04elM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MshtmlDac.dll

Files

MshtmlDac.dll
.dll windows:10 windows x86 arch:x86

afa5f333b0d7fda518199226023fd3ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

MshtmlDac.pdb

Imports

msvcrt

malloc
free
_except_handler4_common
_amsg_exit
_XcptFilter
_initterm
memset

oleaut32

SysFreeString
SysAllocString

kernel32

GetVersion
HeapFree
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
HeapAlloc
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
GetModuleHandleW
RaiseFailFastException
InitializeCriticalSection
DeleteCriticalSection
GetProcessHeap
GetProcAddress

Exports

Exports

DllGetClassObject

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ