JavaScriptCollectionAgent[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

JavaScriptCollectionAgent.dll
Size

59KB
MD5

fcaf49ae2e10ef3823262d10e7f2d0de
SHA1

cd636f4341e1a9422c3c58a594db8fb894050b6f
SHA256

5079765c6e223294f8614ae5e020622bfdfe1289f00d8e9005de87cf9d35eed6
SHA512

c71985e2f05a19c28189b8f909c3b4382ad5b614b63533fc26ce21c7a3eec7187a2157158762836d75b791072154e78541f07dc43c6d5b4f4ef1978de2dd7f58
SSDEEP

1536:uMl5fBpWprE/7aG81Jw38zoJJw7rQTJjx67mNMut:uMl5fBIe/7aJTs8zoJJxImNMut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JavaScriptCollectionAgent.dll

Files

JavaScriptCollectionAgent.dll
.dll windows:6 windows x86 arch:x86

130c71ed61857cf594835f619315adbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

JavaScriptCollectionAgent.pdb

Imports

msvcrt

malloc
_wtoi
_unlock
_lock
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
memcpy
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
__dllonexit
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
_callnewh
_ui64tow_s
memset
memmove_s
memmove
vswprintf_s
_vscwprintf
_onexit
_errno
realloc
_except_handler4_common
_purecall
free
memcpy_s
wcsnlen
??0exception@@QAE@ABV0@@Z
??3@YAXPAX@Z

kernel32

TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetLastError
QueryPerformanceFrequency
QueueUserWorkItem
RaiseException
CloseHandle
K32GetProcessMemoryInfo
OpenProcess
SizeofResource
LockResource
LoadResource
FindResourceExW
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
Sleep
OutputDebugStringA

user32

UnregisterClassA

ole32

CoTaskMemAlloc
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString

tdh

TdhGetProperty
TdhGetPropertySize

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

130c71ed61857cf594835f619315adbd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

user32

ole32

oleaut32

tdh

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB