JavaScriptCollectionAgent[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

JavaScriptCollectionAgent.dll
Size

59KB
MD5

0d3d502bb833c7d16d4240000fe06c93
SHA1

d6774c39b076172285568b19c98c702f3080b89c
SHA256

d9041dd6fbcc407fa436b87c51ff666a139f88cc80f68dd07cfaaa98fe31c7df
SHA512

2a66f26d28d8af8fbf7a44c9b7ac39257282842aa1db7baecd74161c0d70937993efaf3f26fd2634683ff1352d59cfcd68d86e5cab1c39d852bd2a6ae7801a0a
SSDEEP

1536:r+l5fB3WprE/7aG81Jw38zoJJw7rQTJjr67m7U5ut:r+l5fBme/7aJTs8zoJJxCmA5ut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JavaScriptCollectionAgent.dll

Files

JavaScriptCollectionAgent.dll
.dll windows:6 windows x86 arch:x86

130c71ed61857cf594835f619315adbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

JavaScriptCollectionAgent.pdb

Imports

msvcrt

malloc
_wtoi
_unlock
_lock
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
memcpy
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
__dllonexit
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
_callnewh
_ui64tow_s
memset
memmove_s
memmove
vswprintf_s
_vscwprintf
_onexit
_errno
realloc
_except_handler4_common
_purecall
free
memcpy_s
wcsnlen
??0exception@@QAE@ABV0@@Z
??3@YAXPAX@Z

kernel32

TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetLastError
QueryPerformanceFrequency
QueueUserWorkItem
RaiseException
CloseHandle
K32GetProcessMemoryInfo
OpenProcess
SizeofResource
LockResource
LoadResource
FindResourceExW
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
Sleep
OutputDebugStringA

user32

UnregisterClassA

ole32

CoTaskMemAlloc
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString

tdh

TdhGetProperty
TdhGetPropertySize

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

130c71ed61857cf594835f619315adbd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

user32

ole32

oleaut32

tdh

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB