General

  • Target

    RexonFREE.dll

  • Size

    3.5MB

  • MD5

    92fb386bc2710f84752d0ae218f25cd2

  • SHA1

    b1a690e371f1a4c1ac900a27e363f521c299400e

  • SHA256

    2a8f2b01cd7a7229808cc7119f7f95589a702d06854d52a7ed00c5b424c6c4ec

  • SHA512

    3e6d8b62a6bdd367dba76908b8128e77b2bde3ce4d29fa682f49e74940d4427ea2f465338765114a11c438446314dabaff789009186cb27824942b5d06d3434c

  • SSDEEP

    98304:aC3EVtFAf7hwFRwKlx4fvqEq7YZYo6q5fITnCRD9:aCMtFu7hwFRwhqEq7YZH6fTnCRD

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RexonFREE.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections