General

  • Target

    RecStudioWin.zip

  • Size

    5.3MB

  • MD5

    a7e18fd2bf732f8a28c8d3a0aad9f3b3

  • SHA1

    7c03f293db13e0cb5b977b97e6fb8942ddd44ecd

  • SHA256

    12e50f2f0533150034eea0f289b89cf486fa3fccc448f0017b2005fcf1f81ed0

  • SHA512

    f286510e06e54bcdc3b395367f90bd6f1dbe916398ad624fa83c2c93a8c141a6050fbea8382bcc3aa7c3935e2574f610807788506ffe5ca1ce16edb56cf3fff7

  • SSDEEP

    98304:0Q8ASu51EiMxVZ5Vi3frqJOkKn46bUaeKeYLMtLo9q8wqkPWgnJwIMp5Qu1Mb:v15+BjZ5Vi3DqOB46bUJMMtLo9UqkPWC

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • RecStudioWin.zip
    .zip
  • bin/RecCLI.exe
    .exe windows:5 windows x86 arch:x86

    b96bf1e60bd89a20a80956be4ffeebf9


    Headers

    Imports

    Sections

  • bin/RecCLI64.exe
    .exe windows:5 windows x64 arch:x64

    37c52a70fd9e676ceef2e53a48e2b407


    Headers

    Imports

    Sections

  • bin/RecStudio.exe
    .exe windows:5 windows x86 arch:x86

    d9775ae979d34b4c2ba8bb8b58c801ac


    Headers

    Imports

    Sections

  • bin/wxbase28_net_vc_custom.dll
    .dll windows:5 windows x86 arch:x86

    4cb473678c66fe566ae915b2948eddc7


    Headers

    Imports

    Exports

    Sections

  • bin/wxbase28_vc_custom.dll
    .dll windows:5 windows x86 arch:x86

    6a029915ecd4e25eebaaaa57ae89ebe4


    Headers

    Imports

    Exports

    Sections

  • bin/wxbase28_xml_vc_custom.dll
    .dll windows:5 windows x86 arch:x86

    aa9a8f0cdec2ed8e3baca7a426ae86aa


    Headers

    Imports

    Exports

    Sections

  • bin/wxmsw28_adv_vc_custom.dll
    .dll windows:5 windows x86 arch:x86

    01702119b901a02361a82e51ca590911


    Headers

    Imports

    Exports

    Sections

  • bin/wxmsw28_aui_vc_custom.dll
    .dll windows:5 windows x86 arch:x86

    935d7f68d6e1079499e8b1d1599437d2


    Headers

    Imports

    Exports

    Sections

  • bin/wxmsw28_core_vc_custom.dll
    .dll windows:5 windows x86 arch:x86

    cedea21f4e90fd1688477c21e40f4863


    Headers

    Imports

    Exports

    Sections

  • bin/wxmsw28_html_vc_custom.dll
    .dll windows:5 windows x86 arch:x86

    83d4110da1982b55dd80731df7612bb2


    Headers

    Imports

    Exports

    Sections

  • bin/wxmsw28_qa_vc_custom.dll
    .dll windows:5 windows x86 arch:x86

    0946b9366a74b2a620c89f874c3ffc1f


    Headers

    Imports

    Exports

    Sections

  • bin/wxmsw28_richtext_vc_custom.dll
    .dll windows:5 windows x86 arch:x86

    3480357b6691d6ad02f4ac82199b8e0b


    Headers

    Imports

    Exports

    Sections

  • support/DJGPP-32-x86.rse
  • support/ELF-32-MIPS.rse
  • support/ELF-32-MIPSLE.rse
  • support/ELF-32-x86.rse
  • support/ELF-64-x86_64.rse
  • support/Linux/inet.c
  • support/Linux/inet.o
    .elf linux x86
  • support/Linux/pthread.c
  • support/Linux/pthread.o
    .elf linux x86
  • support/Linux/socket.c
  • support/Linux/socket.o
    .elf linux x86
  • support/Linux/time.c
  • support/Linux/time.o
    .elf linux x86
  • support/PECOFF-32-x82.txt
  • support/PECOFF-32-x86.rse
  • support/PECOFF-32-x86_64.rse
  • support/PSX-syscalls.txt
  • support/Prototypes/ASCIIFUN.C
  • support/Prototypes/ASCIIFUN.H
  • support/Prototypes/ASCIIFUN.O
    .elf linux sparc
  • support/Prototypes/Base.h
  • support/Prototypes/COMMFUNC.C
  • support/Prototypes/COMMFUNC.H
  • support/Prototypes/COMMFUNC.O
    .elf linux sparc
  • support/Prototypes/Defines.h
  • support/Prototypes/Errors.h
  • support/Prototypes/FCNTL.C
  • support/Prototypes/FCNTL.O
    .elf linux x86
  • support/Prototypes/MAKEFILE
  • support/Prototypes/MKC.C
  • support/Prototypes/MMSYSTEM.C
  • support/Prototypes/MMSYSTEM.O
    .elf linux x86
  • support/Prototypes/Messages.h
  • support/Prototypes/SHELLAPI.C
  • support/Prototypes/SHELLAPI.O
    .elf linux x86
  • support/Prototypes/SOCKETS.C
  • support/Prototypes/SOCKETS.O
    .elf linux sparc
  • support/Prototypes/STDIO.C
  • support/Prototypes/STDIO.O
    .elf linux x86
  • support/Prototypes/STDLIB.C
  • support/Prototypes/STDLIB.O
    .elf linux x86
  • support/Prototypes/STRING.C
  • support/Prototypes/STRING.O
    .elf linux x86
  • support/Prototypes/Sockets.h
  • support/Prototypes/UCODFUNC.C
  • support/Prototypes/UCODFUNC.H
  • support/Prototypes/UCODFUNC.O
    .elf linux sparc
  • support/Prototypes/UNISTD.C
  • support/Prototypes/UNISTD.O
    .elf linux x86
  • support/Prototypes/W95TYPES.H
  • support/Prototypes/WADVAPI.H
  • support/Prototypes/WINBASE.C
  • support/Prototypes/WINBASE.H
  • support/Prototypes/WINBASE.O
    .elf linux x86
  • support/Prototypes/WINCON.H
  • support/Prototypes/WINDEF.H
  • support/Prototypes/WINDOWS.H
  • support/Prototypes/WINDOWSX.H
  • support/Prototypes/WINERROR.H
  • support/Prototypes/WINFUNCS.H
    .vbs
  • support/Prototypes/WINGDI.C
  • support/Prototypes/WINGDI.H
  • support/Prototypes/WINGDI.O
    .elf linux x86
  • support/Prototypes/WINNT.H
  • support/Prototypes/WINREG.C
  • support/Prototypes/WINREG.H
  • support/Prototypes/WINREG.O
    .elf linux x86
  • support/Prototypes/WINSOCK.H
  • support/Prototypes/WINTYPES.H
  • support/Prototypes/WINUSER.C
  • support/Prototypes/WINUSER.H
  • support/Prototypes/WINUSER.O
    .elf linux x86
  • support/Prototypes/WKERNEL.H
  • support/Prototypes/WSTRUCTS.H
  • support/Prototypes/WVERSION.H
  • support/Prototypes/asciifun.dmp
  • support/Prototypes/commfunc.dmp
  • support/Prototypes/error.c
  • support/Prototypes/error.dmp
  • support/Prototypes/error.o
    .elf linux x86
  • support/Prototypes/evntrace.c
  • support/Prototypes/evntrace.dmp
  • support/Prototypes/evntrace.o
  • support/Prototypes/fcntl.dmp
  • support/Prototypes/gcc_eh.c
  • support/Prototypes/gccexcept.dmp
  • support/Prototypes/getopt.c
  • support/Prototypes/getopt.dmp
  • support/Prototypes/getopt.o
    .elf linux x86
  • support/Prototypes/libintl.c
  • support/Prototypes/libintl.dmp
  • support/Prototypes/libintl.o
    .elf linux x86
  • support/Prototypes/locale.c
  • support/Prototypes/locale.dmp
  • support/Prototypes/locale.o
    .elf linux x86
  • support/Prototypes/mmsystem.dmp
  • support/Prototypes/shellapi.dmp
  • support/Prototypes/shlwapi.c
  • support/Prototypes/shlwapi.dmp
  • support/Prototypes/shlwapi.o
  • support/Prototypes/shlwapi_.c
  • support/Prototypes/stdio.dmp
  • support/Prototypes/stdlib.dmp
  • support/Prototypes/string.dmp
  • support/Prototypes/test.c
  • support/Prototypes/ucodfunc.dmp
  • support/Prototypes/unistd.dmp
  • support/Prototypes/winbase.dmp
  • support/Prototypes/wingdi.dmp
  • support/Prototypes/winreg.dmp
  • support/Prototypes/winstdlib.c
  • support/Prototypes/winstring.c
  • support/Prototypes/winstring.dmp
  • support/Prototypes/winstring.o
  • support/Prototypes/winuser.dmp
  • support/gcc-mips-32.txt
  • support/linux-x86-32.txt
  • support/mac-64-x86_64.rse
  • support/msvc6-x86.txt
  • support/psx-32-mipsle.rse
  • support/psx-mipsle.txt
  • support/raw-32-mips.rse
  • support/rec_x86.h
  • support/socket.c
  • support/socket.o
    .elf linux x86
  • support/win32api/advapi32.dbin
  • support/win32api/comctl32.dbin
  • support/win32api/comdlg32.dbin
  • support/win32api/gdi32.c
  • support/win32api/gdi32.dbin
  • support/win32api/gdi32.o
  • support/win32api/gdi32.ojd
  • support/win32api/kernel32.c
  • support/win32api/kernel32.dbin
  • support/win32api/kernel32.o
  • support/win32api/kernel32.ojd
  • support/win32api/mksrc.c
  • support/win32api/mksrc.exe
    .exe windows:4 windows x86 arch:x86

    7a81608d569451e034d525da5de7779d


    Headers

    Imports

    Sections

  • support/win32api/mmsys.c
  • support/win32api/mmsys.o
  • support/win32api/mmsys.ojd
  • support/win32api/mmsystem.c
  • support/win32api/msvcrt.dbin
  • support/win32api/ole32.dbin
  • support/win32api/shell32.dbin
  • support/win32api/user32.c
  • support/win32api/user32.dbin
  • support/win32api/user32.o
  • support/win32api/user32.ojd
  • support/win32api/winbase.c
  • support/win32api/wincon.c
  • support/win32api/wingdi.c
  • support/win32api/winuser.c