General

  • Target

    RexonFREE.dll

  • Size

    2.5MB

  • MD5

    e66762e7ece402b13fbadc7858397359

  • SHA1

    9008fc4aa88eee97cadd16b8b94f537320bbea62

  • SHA256

    40fcef2de587785202faf78f541639508279e198f13887f8bcee44612f011ac5

  • SHA512

    6ba1affad47313450c8251bdb20009aab8b093a9c369c7fbaceb3bb2a8dd4bc6de61c1968f4d805e685bbef1993e4f6f1d6f39ffbb7676472d02c50121468731

  • SSDEEP

    49152:ko9HQRWZ5eG+iozyxDHuASznHBoxHV6VAP7krzn5+5L1GgWrWy1bquisKpqg9Xol:k4Hu+7R2BByUYDo

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RexonFREE.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections