JavaScriptCollectionAgent.pdb
Static task
static1
Behavioral task
behavioral1
Sample
JavaScriptCollectionAgent.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
JavaScriptCollectionAgent.dll
Resource
win10v2004-20240426-en
General
-
Target
JavaScriptCollectionAgent.dll
-
Size
34KB
-
MD5
95bf8b99b7ab20a8d936a8567996ef67
-
SHA1
bd7f531726e15e7c933574bde366d61e380bc9ec
-
SHA256
bee897fb6f02087691d8cca90286ace519fb485612388e5876ab48a1cfe7ef97
-
SHA512
6714b3cfbd36ba1d88c757653cf41a63247c0b22f7620b0410953366b31a265abf80dadd8818eab869145ca0aa4ad570982ce3b643a4ee029b7a1bd8c3a39097
-
SSDEEP
768:ZtFT9URqt5hKcncywzeIlIeClWvYU8Gv9Labgdz:PFTmRqtrKcncymlgKv9ubgd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JavaScriptCollectionAgent.dll
Files
-
JavaScriptCollectionAgent.dll.dll windows:6 windows x86 arch:x86
998eb1e7dbc5aca923a8b03c27b7c10d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_XcptFilter
_callnewh
memcpy
_amsg_exit
_CxxThrowException
__dllonexit
??1exception@@UAE@XZ
_initterm
_unlock
??1type_info@@UAE@XZ
_lock
__CxxFrameHandler3
memmove
_purecall
_onexit
_except_handler4_common
?what@exception@@UBEPBDXZ
malloc
free
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
memset
??3@YAXPAX@Z
kernel32
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
RaiseException
InitializeCriticalSection
CloseHandle
K32GetProcessMemoryInfo
GetLastError
OpenProcess
GetCurrentProcess
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
user32
UnregisterClassA
ole32
CoTaskMemAlloc
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
tdh
TdhGetPropertySize
TdhGetProperty
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ