JavaScriptCollectionAgent[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

JavaScriptCollectionAgent.dll
Size

59KB
MD5

cc5895b62fddb2745f8feeb0aee9524e
SHA1

d720ecce2de6893e93e45009d9907d100593dd05
SHA256

b91fd0420c33b53865761337a2c73102911afe246e0979cf317e12e25c17b810
SHA512

45f433be3d5b4478cdcc8d386843f35cd340c4c2fba9ca66fac5b43fcbb334387a9c683cdaae41089c91828eda471ef93023907800ced88108d8805418948fdc
SSDEEP

1536:Ual5fBPWprE/7aG81Jw38zoJJw7rQTJjk67mseut:Ual5fBue/7aJTs8zoJJxPmseut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JavaScriptCollectionAgent.dll

Files

JavaScriptCollectionAgent.dll
.dll windows:6 windows x86 arch:x86

130c71ed61857cf594835f619315adbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

JavaScriptCollectionAgent.pdb

Imports

msvcrt

malloc
_wtoi
_unlock
_lock
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
memcpy
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
__dllonexit
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
_callnewh
_ui64tow_s
memset
memmove_s
memmove
vswprintf_s
_vscwprintf
_onexit
_errno
realloc
_except_handler4_common
_purecall
free
memcpy_s
wcsnlen
??0exception@@QAE@ABV0@@Z
??3@YAXPAX@Z

kernel32

TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetLastError
QueryPerformanceFrequency
QueueUserWorkItem
RaiseException
CloseHandle
K32GetProcessMemoryInfo
OpenProcess
SizeofResource
LockResource
LoadResource
FindResourceExW
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
Sleep
OutputDebugStringA

user32

UnregisterClassA

ole32

CoTaskMemAlloc
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString

tdh

TdhGetProperty
TdhGetPropertySize

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

130c71ed61857cf594835f619315adbd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

user32

ole32

oleaut32

tdh

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB