General

  • Target

    Bandicam-7.1.0.2151.rar

  • Size

    31.6MB

  • MD5

    23dedd1702cee2b0b5aacb4e305adf04

  • SHA1

    036d450cbe8d1cf77f35fd3482b6b32e378e35c9

  • SHA256

    8bf4291e0acfd37b8b9e69df9fa5d424f5a2a8c6c1264ad0bfb76f9e04af74c7

  • SHA512

    61cd25f9efb391cc4b8cd313ed09373fd0780f3afddd88aa3b539fe5d7afa7e2e47da9060ba03678c291d6959bb916fecbe7e14a1301b618d215e13cc4594b86

  • SSDEEP

    786432:be5nDcXrHAw20vdR8AYkcpeZ8ylVCDOY42ouFLE56GPZKMOL:be5D+rHz2eNYkl8yzoU56Q8L

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Bandicam-7.1.0.2151.rar
    .rar

    Password: 123

  • Bandicam-7.1.0.2151/bdcamsetup.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    e2a592076b17ef8bfb48b7e03965a3fc


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:5 windows x86 arch:x86

    Password: 123

    2302ef28d4d10b9da0f914a5921f3f3e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/D3DCompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    Password: 123

    323b4a980be6850b6d140bd6363118e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp110.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    098e9eddf1a24b3fd9465ee992148a02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    e057a95f8936f77238b048f253956b3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/vcomp140.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    4e2bdf3570f0309d9d2a75b473cb9395


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/BDMPEG1SETUP.EXE
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • RegVulkanLayer.bat
  • UnregVulkanLayer.bat
  • bandicam.ini
  • bdcam.exe
    .exe windows:6 windows x64 arch:x64

    e99229ea9c2730c1cb113a78bae47f9c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcam32.bin
    .exe windows:6 windows x86 arch:x86

    d638afd77aa9b1f80284168bd8833c40


    Code Sign

    Headers

    Imports

    Sections

  • bdcam32.dll
    .dll windows:6 windows x86 arch:x86

    3e0fe8dd8971510d272c354bfce1ac6f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcam64.dll
    .dll windows:6 windows x64 arch:x64

    d00a47711b777b01d9243d5a72affed1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamih.dll
    .dll windows:6 windows x64 arch:x64

    69c4f4f137d00b84d0d5904e859b2d0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamvk32.dll
    .dll windows:6 windows x86 arch:x86

    74a469a209f3b0c49eefaeaff0412414


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamvk32.json
  • bdcamvk64.dll
    .dll windows:6 windows x64 arch:x64

    e590dcab07653ffb4a9bf78b482964df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamvk64.json
  • bdcap32.dll
    .dll windows:6 windows x86 arch:x86

    4db779cf0e4f1c29e15fc67bf6d7d8f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcap64.dll
    .dll windows:6 windows x64 arch:x64

    ed1438965cf0bae303c64388d6f9f09c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdfix.exe
    .exe windows:6 windows x64 arch:x64

    62c4f5eab269919a48f8f2eb717e8739


    Code Sign

    Headers

    Imports

    Sections

  • data/camera.wav
  • data/effects/effects10.dat
  • data/effects/effects15.dat
  • data/effects/effects20.dat
  • data/effects/effects30.dat
  • data/effects/highlight10.dat
  • data/effects/highlight15.dat
  • data/effects/highlight20.dat
  • data/effects/highlight30.dat
  • data/language.dat
  • data/language_bdfix.dat
  • data/lclick.wav
  • data/rclick.wav
  • data/sample.png
    .png
  • data/skin.dat
    .zip
  • data/start.wav
  • data/stop.wav
  • encap64.dll
    .dll windows:6 windows x64 arch:x64

    4ddfeda0e3f67f8d6b297b90f1191d0a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lang/Arabic.ini
  • lang/Armenian.ini
  • lang/Azerbaijani.ini
  • lang/Belarusian.ini
  • lang/Bosnian.ini
  • lang/Bulgarian.ini
  • lang/Burmese.ini
  • lang/Croatian.ini
  • lang/Czech.ini
  • lang/Danish.ini
  • lang/Dutch.ini
  • lang/English.ini
  • lang/Farsi.ini
  • lang/Finnish.ini
  • lang/French.ini
  • lang/Georgian.ini
  • lang/German.ini
  • lang/Greek.ini
  • lang/Hebrew.ini
  • lang/Hungarian.ini
  • lang/Indonesian.ini
  • lang/Italian.ini
  • lang/Japanese.ini
    .ps1
  • lang/Kazakh.ini
  • lang/Kurdish.ini
  • lang/Latvian.ini
  • lang/Lithuanian.ini
  • lang/Luxembourgish.ini
  • lang/Malay.ini
  • lang/Norwegian.ini
  • lang/Polish.ini
  • lang/Portuguese(BR).ini
  • lang/Portuguese.ini
  • lang/Romanian.ini
  • lang/Russian.ini
  • lang/Serbian(Cyrillic).ini
  • lang/Serbian.ini
  • lang/Simplified_Chinese.ini
  • lang/Sinhala.ini
  • lang/Slovak.ini
  • lang/Slovenian.ini
  • lang/Spanish.ini
  • lang/Swedish.ini
  • lang/Thai.ini
  • lang/Traditional_Chinese.ini
  • lang/Turkish.ini
  • lang/Ukrainian.ini
  • lang/Urdu.ini
  • lang/Uzbek.ini
  • lang/Vietnamese.ini
  • lang/khmer.ini
  • translators.txt
  • Bandicam-7.1.0.2151/reg.rar
    .rar