Overview

overview

7

Static

static

7

RexonPAID_...vr.dll

windows7-x64

1

RexonPAID_...vr.dll

windows10-1703-x64

1

RexonPAID_...vr.dll

windows10-2004-x64

1

RexonPAID_...vr.dll

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    RexonPAID_crackedbyezerovr.dll

  • Size

    3.8MB

  • MD5

    aac534d5d33f0446800ecbe8adbfb4f8

  • SHA1

    00d180e881cb6f8bd7d8a3723ac9c7fc4f57495b

  • SHA256

    4bc6f389763b39ed258cc8c9adb19a9fda1733679ff5be6061ef87012b5ada96

  • SHA512

    8223be5d2e49fc12faad1cab71696fc4d4ea2d6b55f0b4e989903e874f929eae49181adfcaf04b55039aa459dc5c8ad36df8f7c2609fef007073508b1522d652

  • SSDEEP

    98304:xpk7ztmQduPF9CEI/8lnhIkgp78SJ5R7TE8HJK/cQj9fzGaD4R:xpk7zcQdiF9CEI/8lnhIkgp78S7R7TEZ

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RexonPAID_crackedbyezerovr.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections