General

  • Target

    RexonFREE (1).dll

  • Size

    2.8MB

  • MD5

    7b037b0912fb186e2c6b10b0f951ad61

  • SHA1

    e8ebb8fa486d83cea3bc252f11a7719b0af0518b

  • SHA256

    239249bfeed6aa60c27700076dac8e500c98291412ce38d470fa69c1650b96e3

  • SHA512

    2e44c6a177171d4942318e1dd2c6c62156397d526e9340c1a8af4cb9318fdbb1df75891e8cdf91cf06807ee5814cb5c6160a76c1a16538b2505b369bc6448e54

  • SSDEEP

    49152:NW1Uh0Ata+CAInGtBv4MqG3IWPTfqLu6rf73cGlOOihxkHCNdoFT0WBBat9AUcSs:1sJHK6Ygyxz69

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RexonFREE (1).dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections