General

  • Target

    RexonFREE.dll

  • Size

    1.6MB

  • MD5

    c42516b5c5173694d535f65579409ea4

  • SHA1

    b5bfe357b8c3fa1f9621dee6fa230689f6b7b95a

  • SHA256

    05c3a977fa5e0074c1dab26c08296979753d8709bfecc7b44d8046aef79936a6

  • SHA512

    94e3d5f019f23a27a3dcd0aeb91a62cd7f74d3dd2689d3e5dba5e891c017aea4e66c12c78ae6a567b079b13d218c4a5fbc53eeff4e744427e26b3d47bd9d139e

  • SSDEEP

    49152:HaYbX/UWqZsYheRl1ESo0miUpam9AvPGF9qYh/5kKY1mqqVHXRONE2VbmE2RFKZN:HaOYXRoFhkxJldW

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RexonFREE.dll
    .dll windows:4 windows x86 arch:x86

    Password: zavsfree

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections