MshtmlDac[.]dll | Triage

Sharing

General

Target

MshtmlDac.dll
Size

61KB
MD5

1fdc57ad4c901870a7dcf0a4e15e6603
SHA1

cd0b39ecaf5f692f0d1d9a23c628b17610f6125b
SHA256

d7303709585b09397dbe08fd91b6700abd382023161fdbcbd15d9903be84d727
SHA512

4c13a508f80d96d6100e263bec5c80a562e4770356d7b1b279a66fafac07fdf82a78b41247f85c1653a46e8e89e825ad5b2d6e5fbbfcf67404d60b3502ae5868
SSDEEP

768:cyeVJCZTUoyt5Jqz0IlcsNgHS/rB1JJNarRAkhzhr5olM4R:+VIdUoypIlgs1v0RAkJhr5olM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MshtmlDac.dll

Files

MshtmlDac.dll
.dll windows:10 windows x86 arch:x86

afa5f333b0d7fda518199226023fd3ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

MshtmlDac.pdb

Imports

msvcrt

malloc
free
_except_handler4_common
_amsg_exit
_XcptFilter
_initterm
memset

oleaut32

SysFreeString
SysAllocString

kernel32

GetVersion
HeapFree
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
HeapAlloc
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
GetModuleHandleW
RaiseFailFastException
InitializeCriticalSection
DeleteCriticalSection
GetProcessHeap
GetProcAddress

Exports

Exports

DllGetClassObject

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ