General

  • Target

    RexonPAID.dll

  • Size

    5.8MB

  • MD5

    09810f358818972f12e7db8585a5fd9e

  • SHA1

    f208e44a07ecbbf45d952560d40244547b564ac8

  • SHA256

    4aa22834e37176445c3f55a2dc63cd5e1cb1e97656ad9263c9773b64861eb02c

  • SHA512

    7e2198f8c9607d31fdd72cc604686ed8a759187173046f3845710ae6b6ebe53d0be048f3a2a2fb841640c4dcda0b4d2a099648dd1981d3bcd98e5daaafc131bf

  • SSDEEP

    98304:h+YA5z/EIpoiE7trdOQ9yvPS8DPVWLHbEVc0h3XtXCoZDJ:h+YWz/EIpoiE7toQ9yvPS8DPVWLHbEyQ

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RexonPAID.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections