protectedByOkaa_identifiedX[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

protectedByOkaa_identifiedX.dll
Size

12.6MB
MD5

5966d04f16f5604d7bbe38c577876542
SHA1

846caa36dfc0365eb0207384c55a33d175913024
SHA256

b57ea45f3d77d3c770607ad514e371c3e9d88499b20b5915ff3a9e0d766a9fc2
SHA512

9302c74ffcfd66d01c1b5b38028c37a95f4b293bf2880f3806a2d2b3f2f7035685258942852dec6015c8387b2a35e0fecd83465804100b05c42806ea2fa9e948
SSDEEP

49152:0NRLXqGsJLDTeuCbCqHcOA0Sh9s1aakhP:0NRL4DT7+cQdUzP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
protectedByOkaa_identifiedX.dll

Files

protectedByOkaa_identifiedX.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12.6MB - Virtual size: 12.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ