General

  • Target

    5aa1234eb23bef8628cdc9189879d629b418cd1d176c99c024a15c3bfe5e413a.zip

  • Size

    31.5MB

  • MD5

    9d59935180099233a8d06d0fa78be88f

  • SHA1

    7cdf43857827f23a0745383319e752c5a4a17511

  • SHA256

    230aa0d1c613ff36672c214652b3e86892efc9cae075be550517aa9ea68db20d

  • SHA512

    bde652467e57f60f84268a4c227942aae7c84ac5e6e23e8298974674b7aba5fe0683dfc4353df33018ee6328ef85659c7ad03894ff11d7cd8c7b92884a39baa1

  • SSDEEP

    786432:Qo9TzbLBz/48h/bIaHLoWTGk/o+7GL0AHNbhqMf:Qo9hAckWTGkgAExtbhqMf

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 5aa1234eb23bef8628cdc9189879d629b418cd1d176c99c024a15c3bfe5e413a.zip
    .zip

    Password: infected

  • bdcamsetup.exe
    .exe windows:4 windows x86 arch:x86

    e2a592076b17ef8bfb48b7e03965a3fc


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:5 windows x86 arch:x86

    2302ef28d4d10b9da0f914a5921f3f3e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/D3DCompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    323b4a980be6850b6d140bd6363118e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp110.dll
    .dll windows:6 windows x86 arch:x86

    098e9eddf1a24b3fd9465ee992148a02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    e057a95f8936f77238b048f253956b3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/vcomp140.dll
    .dll windows:6 windows x86 arch:x86

    4e2bdf3570f0309d9d2a75b473cb9395


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/BDMPEG1SETUP.EXE
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:5 windows x86 arch:x86

    cd90e33ffbc335413a25300c682c83df


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:5 windows x86 arch:x86

    45d25ca52c312b2254c60dbcb30342d1


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/bdmjpeg.dll
    .dll windows:5 windows x86 arch:x86

    bf6c7259ffaa7b3eb59b7d97edcbb647


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmjpeg64.dll
    .dll windows:5 windows x64 arch:x64

    1c3318cf9e21cee7c0d17aa9a319a3c6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmpega.acm
    .dll windows:5 windows x86 arch:x86

    a59629a50eafc3a20d9d62c5f0118409


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmpega64.acm
    .dll windows:5 windows x64 arch:x64

    3259065632343fd95fdf829cba05685c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmpegv.dll
    .dll windows:5 windows x86 arch:x86

    bf6c7259ffaa7b3eb59b7d97edcbb647


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/bdmpegv64.dll
    .dll windows:5 windows x64 arch:x64

    1c3318cf9e21cee7c0d17aa9a319a3c6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/bdfilters.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    27f07fb2c76df7e3ac5b98f25b3ec3e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdfilters.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    27f07fb2c76df7e3ac5b98f25b3ec3e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdfilters64.dll
    .dll regsvr32 windows:5 windows x64 arch:x64

    03c1aad04c80a2e0fd5bd4c160a3d1d1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uninstall.exe.nsis
  • RegVulkanLayer.bat
  • UnregVulkanLayer.bat
  • bandicam.ini
  • bdcam.exe
    .exe windows:6 windows x64 arch:x64

    bdbf48e167d8d8d7821630ba381040e8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcam32.bin
    .exe windows:6 windows x86 arch:x86

    31da296cca1c88ff685c588787c1742f


    Code Sign

    Headers

    Imports

    Sections

  • bdcam32.dll
    .dll windows:6 windows x86 arch:x86

    3e0fe8dd8971510d272c354bfce1ac6f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcam64.dll
    .dll windows:6 windows x64 arch:x64

    d00a47711b777b01d9243d5a72affed1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamih.dll
    .dll windows:6 windows x64 arch:x64

    69c4f4f137d00b84d0d5904e859b2d0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamvk32.dll
    .dll windows:6 windows x86 arch:x86

    74a469a209f3b0c49eefaeaff0412414


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamvk32.json
  • bdcamvk64.dll
    .dll windows:6 windows x64 arch:x64

    e590dcab07653ffb4a9bf78b482964df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamvk64.json
  • bdcap32.dll
    .dll windows:6 windows x86 arch:x86

    4db779cf0e4f1c29e15fc67bf6d7d8f3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcap64.dll
    .dll windows:6 windows x64 arch:x64

    ed1438965cf0bae303c64388d6f9f09c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdfix.exe
    .exe windows:6 windows x64 arch:x64

    62c4f5eab269919a48f8f2eb717e8739


    Code Sign

    Headers

    Imports

    Sections

  • data/camera.wav
  • data/effects/effects10.dat
  • data/effects/effects15.dat
  • data/effects/effects20.dat
  • data/effects/effects30.dat
  • data/effects/highlight10.dat
  • data/effects/highlight15.dat
  • data/effects/highlight20.dat
  • data/effects/highlight30.dat
  • data/language.dat
  • data/language_bdfix.dat
  • data/lclick.wav
  • data/rclick.wav
  • data/sample.png
    .png
  • data/skin.dat
    .zip
  • admin_icon.png
    .png
  • audio_b.png
    .png
  • bandifix/bandifix.xml
    .xml
  • bandifix/bandifix_logo.png
    .png
  • bandifix/btn_click.png
    .png
  • bandifix/btn_click2.png
    .png
  • bandifix/btn_close.png
    .png
  • bandifix/btn_help.png
    .png
  • bandifix/line.png
    .png
  • bandifix/prog_process_1.png
    .png
  • bandifix/prog_process_2.png
    .png
  • bandifix/prog_process_over.png
    .png
  • bdcam_info.png
    .png
  • beta_icon.png
    .png
  • body_bg.png
    .png
  • btn_audio_only.png
    .png
  • btn_audio_only_2.png
    .png
  • btn_audio_s.png
    .png
  • btn_back_s.png
    .png
  • btn_bandicut.png
    .png
  • btn_capture.png
    .png
  • btn_capture_2.png
    .png
  • btn_check.png
    .png
  • btn_click.png
    .png
  • btn_click2.png
    .png
  • btn_clock.png
    .png
  • btn_close.png
    .png
  • btn_device.png
    .png
  • btn_device_2.png
    .png
  • btn_device_s.png
    .png
  • btn_directx.png
    .png
  • btn_directx_2.png
    .png
  • btn_folder.png
    .png
  • btn_fps_check.png
    .png
  • btn_fps_uncheck.png
    .png
  • btn_full_s.png
    .png
  • btn_game_s.png
    .png
  • btn_help.png
    .png
  • btn_home_select.png
    .png
  • btn_image_tab.png
    .png
  • btn_key.png
    .png
  • btn_lock_s.png
    .png
  • btn_microphone_mute_off.png
    .png
  • btn_microphone_mute_on.png
    .png
  • btn_microphone_settings_off.png
    .png
  • btn_microphone_settings_on.png
    .png
  • btn_minimize.png
    .png
  • btn_mouse_s.png
    .png
  • btn_mouse_settings_all.png
    .png
  • btn_mouse_settings_cursor.png
    .png
  • btn_mouse_settings_effect.png
    .png
  • btn_mouse_settings_off.png
    .png
  • btn_output_audio_tab.png
    .png
  • btn_output_audio_tab2.png
    .png
  • btn_output_image_tab.png
    .png
  • btn_output_image_tab2.png
    .png
  • btn_output_video_tab.png
    .png
  • btn_output_video_tab2.png
    .png
  • btn_page_audio_setting.png
    .png
  • btn_page_audio_setting2.png
    .png
  • btn_page_frame_setting.png
    .png
  • btn_page_frame_setting2.png
    .png
  • btn_page_general_setting.png
    .png
  • btn_page_general_setting2.png
    .png
  • btn_page_home.png
    .png
  • btn_page_home2.png
    .png
  • btn_page_image_setting.png
    .png
  • btn_page_image_setting2.png
    .png
  • btn_page_info.png
    .png
  • btn_page_info2.png
    .png
  • btn_page_video_setting.png
    .png
  • btn_page_video_setting2.png
    .png
  • btn_pause.png
    .png
  • btn_pause_2.png
    .png
  • btn_radio_check.png
    .png
  • btn_radio_uncheck.png
    .png
  • btn_record.png
    .png
  • btn_record_2.png
    .png
  • btn_record_2_small.png
    .png
  • btn_record_small.png
    .png
  • btn_rect_s.png
    .png
  • btn_refresh.png
    .png
  • btn_schedule.png
    .png
  • btn_screen_exp.png
    .png
  • btn_screen_exp_2.png
    .png
  • btn_screen_finder.png
    .png
  • btn_screen_full.png
    .png
  • btn_screen_full_2.png
    .png
  • btn_screen_lockwindow.png
    .png
  • btn_screen_lockwindow_2.png
    .png
  • btn_screen_mouse.png
    .png
  • btn_screen_mouse_2.png
    .png
  • btn_screen_rectangle.png
    .png
  • btn_screen_rectangle_2.png
    .png
  • btn_setting.png
    .png
  • btn_setting_2.png
    .png
  • btn_sort.png
    .png
  • btn_speaker_mute_off.png
    .png
  • btn_speaker_mute_on.png
    .png
  • btn_speaker_settings_off.png
    .png
  • btn_speaker_settings_on.png
    .png
  • btn_start_tab.png
    .png
  • btn_text_settings_off.png
    .png
  • btn_text_settings_on.png
    .png
  • btn_tips.png
    .png
  • btn_tray.png
    .png
  • btn_uncheck.png
    .png
  • btn_unregclose.png
    .png
  • btn_unregtips.png
    .png
  • btn_video_tab.png
    .png
  • btn_webcam_screen_off.png
    .png
  • btn_webcam_screen_on.png
    .png
  • business_icon.png
    .png
  • device.png
    .png
  • device/btn_close.png
    .png
  • device/btn_fullscreen.png
    .png
  • device/btn_img_start.png
    .png
  • device/btn_img_stop.png
    .png
  • device/btn_menu.png
    .png
  • device/btn_rec_pause.png
    .png
  • device/btn_rec_paused.png
    .png
  • device/btn_rec_start.png
    .png
  • device/btn_rec_stop.png
    .png
  • device/btn_restore.png
    .png
  • device/btn_settings.png
    .png
  • device/btn_volume_0.png
    .png
  • device/btn_volume_1.png
    .png
  • device/btn_volume_2.png
    .png
  • device/btn_volume_3.png
    .png
  • device/client.png
    .png
  • device/client2.png
    .png
  • device/client_big.png
    .png
  • device/device.xml
  • device/device_bg.png
    .png
  • device/device_btn.png
    .png
  • device/device_connect2.png
    .png
  • device/device_full.xml
  • device/device_intro_2.png
    .png
  • device/prog_volume_bg.png
    .png
  • device/prog_volume_micriophone.png
    .png
  • device/prog_volume_micriophone_bg.png
    .png
  • device/prog_volume_speaker.png
    .png
  • device/prog_volume_speaker_bg.png
    .png
  • device/side_l.png
    .png
  • device/side_l_bg.png
    .png
  • device/side_r.png
    .png
  • device/side_r_bg.png
    .png
  • device/video.xml
  • device/volume_knob.png
    .png
  • device/volume_slider_off.png
    .png
  • device/volume_slider_on.png
    .png
  • device_b.png
    .png
  • dialog/bandicut.jpg
    .jpg
  • dialog/btn_click.png
    .png
  • dialog/btn_click_w.png
    .png
  • dialog/btn_close.png
    .png
  • dialog/btn_close_w.png
    .png
  • dialog/logo.png
    .png
  • dialog/logo_w.png
    .png
  • dialog/popup_notice.xml
  • dialog/prog_download_1.png
    .png
  • dialog/prog_download_2.png
    .png
  • dialog/reg_limited.xml
  • dialog/renew_license.xml
  • dialog/update2_progress.xml
  • dialog/update_progress.xml
  • expired_icon.png
    .png
  • folder.png
    .png
  • fps_bg.png
    .png
  • full.png
    .png
  • full_b.png
    .png
  • game.png
    .png
  • game_b.png
    .png
  • help_b.png
    .png
  • hotkey_icon.png
    .png
  • line.png
    .png
  • line2.png
    .png
  • lock.png
    .png
  • lock_b.png
    .png
  • logo.png
    .png
  • logo_cn.png
    .png
  • mode_audio.png
    .png
  • mode_device.png
    .png
  • mode_directx.png
    .png
  • mode_fullscreen.png
    .png
  • mode_lockwindow.png
    .png
  • mode_mouse.png
    .png
  • mode_rectangle.png
    .png
  • mouse.png
    .png
  • mouse_b.png
    .png
  • new_icon_b.png
    .png
  • num_0.png
    .png
  • num_1.png
    .png
  • num_2.png
    .png
  • num_3.png
    .png
  • num_4.png
    .png
  • num_5.png
    .png
  • num_6.png
    .png
  • num_7.png
    .png
  • num_8.png
    .png
  • num_9.png
    .png
  • num_colon.png
    .png
  • num_dot.png
    .png
  • page_about.xml
  • page_audio.xml
  • page_fps.xml
  • page_general.xml
  • page_image.xml
  • page_outputs.xml
  • page_video.xml
  • popup/audio.png
    .png
  • popup/btn_check_off_popup.png
    .png
  • popup/btn_check_off_popup_sel.png
    .png
  • popup/btn_check_on.png
    .png
  • popup/btn_check_on_popup.png
    .png
  • popup/btn_check_on_popup_sel.png
    .png
  • popup/btn_menu.png
    .png
  • popup/btn_mode_check_off.png
    .png
  • popup/btn_mode_check_off_sel.png
    .png
  • popup/btn_mode_check_on.png
    .png
  • popup/btn_mode_check_on_sel.png
    .png
  • popup/btn_radio.png
    .png
  • popup/btn_radio_off.png
    .png
  • popup/btn_radio_on.png
    .png
  • popup/btn_select_area_menu.png
    .png
  • popup/full.png
    .png
  • popup/lock.png
    .png
  • popup/mic_slider_fill.png
    .png
  • popup/mouse.png
    .png
  • popup/new_icon_s.png
    .png
  • popup/rect.png
    .png
  • popup/screen_mode.xml
  • popup/screen_mode_fullscreen.xml
  • popup/screen_mode_mouse.xml
  • popup/screen_mode_rectangle.xml
  • popup/screen_mode_window_screen.xml
  • popup/select.png
    .png
  • popup/select_microphone.xml
  • popup/select_speaker.xml
  • popup/slider_empty.png
    .png
  • popup/slider_fill.png
    .png
  • popup/slider_knob.png
    .png
  • popup/slider_microphone_icon.png
    .png
  • popup/slider_speaker_icon.png
    .png
  • prog_volume.png
    .png
  • prog_volume_bg.png
    .png
  • prog_volume_micriophone.png
    .png
  • prog_volume_micriophone_a.png
    .png
  • prog_volume_micriophone_bg.png
    .png
  • prog_volume_micriophone_bg_a.png
    .png
  • prog_volume_speaker.png
    .png
  • prog_volume_speaker_a.png
    .png
  • prog_volume_speaker_bg.png
    .png
  • prog_volume_speaker_bg_a.png
    .png
  • rec_bg.png
    .png
  • rect.png
    .png
  • rect_b.png
    .png
  • safemode.png
    .png
  • skin.xml
  • slider_bkgnd_tile.png
    .png
  • slider_var_knob.png
    .png
  • target/btn_close.png
    .png
  • target/btn_findwindow.png
    .png
  • target/btn_fullscreen.png
    .png
  • target/btn_img_start.png
    .png
  • target/btn_img_stop.png
    .png
  • target/btn_menu.png
    .png
  • target/btn_pen_start.png
    .png
  • target/btn_pen_stop.png
    .png
  • target/btn_pin_off.png
    .png
  • target/btn_pin_on.png
    .png
  • target/btn_pip_fullscreen.png
    .png
  • target/btn_pip_fullscreen2.png
    .png
  • target/btn_pip_move.png
    .png
  • target/btn_pip_move2.png
    .png
  • target/btn_rec_pause.png
    .png
  • target/btn_rec_paused.png
    .png
  • target/btn_rec_start.png
    .png
  • target/btn_rec_stop.png
    .png
  • target/btn_restore.png
    .png
  • target/btn_sel_color.png
    .png
  • target/btn_sel_line.png
    .png
  • target/btn_targetsize.png
    .png
  • target/btn_toggle_bottom.png
    .png
  • target/btn_toggle_top.png
    .png
  • target/btn_tools_arrow.png
    .png
  • target/btn_tools_box.png
    .png
  • target/btn_tools_eraser.png
    .png
  • target/btn_tools_eraser_2.png
    .png
  • target/btn_tools_exit.png
    .png
  • target/btn_tools_line.png
    .png
  • target/btn_tools_none.png
    .png
  • target/btn_tools_number.png
    .png
  • target/btn_tools_pen.png
    .png
  • target/btn_tools_pen_hl.png
    .png
  • target/btn_tools_redo.png
    .png
  • target/btn_tools_text.png
    .png
  • target/btn_tools_undo.png
    .png
  • target/client.png
    .png
  • target/client2.png
    .png
  • target/client_big.png
    .png
  • target/drawing_tools.xml
  • target/fullscreen.xml
  • target/pip_tools.xml
  • target/prog_volume_bg.png
    .png
  • target/prog_volume_micriophone.png
    .png
  • target/prog_volume_micriophone_bg.png
    .png
  • target/prog_volume_speaker.png
    .png
  • target/prog_volume_speaker_bg.png
    .png
  • target/rect.xml
  • target/side_l.png
    .png
  • target/side_l_bg.png
    .png
  • target/side_r.png
    .png
  • target/side_r_bg.png
    .png
  • target/space.png
    .png
  • target/tool_bg.png
    .png
  • target/tool_bg2.png
    .png
  • target_glass.png
    .png
  • target_rect.png
    .png
  • target_webcam.png
    .png
  • unregistered_icon.png
    .png
  • vip_icon.png
    .png
  • data/start.wav
  • data/stop.wav
  • encap64.dll
    .dll windows:6 windows x64 arch:x64

    4ddfeda0e3f67f8d6b297b90f1191d0a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lang/Arabic.ini
  • lang/Armenian.ini
  • lang/Azerbaijani.ini
  • lang/Belarusian.ini
  • lang/Bosnian.ini
  • lang/Bulgarian.ini
  • lang/Burmese.ini
  • lang/Croatian.ini
  • lang/Czech.ini
  • lang/Danish.ini
  • lang/Dutch.ini
  • lang/English.ini
  • lang/Farsi.ini
  • lang/Finnish.ini
  • lang/French.ini
  • lang/Georgian.ini
  • lang/German.ini
  • lang/Greek.ini
  • lang/Hebrew.ini
  • lang/Hungarian.ini
  • lang/Indonesian.ini
  • lang/Italian.ini
  • lang/Japanese.ini
    .ps1
  • lang/Kazakh.ini
  • lang/Kurdish.ini
  • lang/Latvian.ini
  • lang/Lithuanian.ini
  • lang/Luxembourgish.ini
  • lang/Malay.ini
  • lang/Norwegian.ini
  • lang/Polish.ini
  • lang/Portuguese(BR).ini
  • lang/Portuguese.ini
  • lang/Romanian.ini
  • lang/Russian.ini
  • lang/Serbian(Cyrillic).ini
  • lang/Serbian.ini
  • lang/Simplified_Chinese.ini
  • lang/Sinhala.ini
  • lang/Slovak.ini
  • lang/Slovenian.ini
  • lang/Spanish.ini
  • lang/Swedish.ini
  • lang/Thai.ini
  • lang/Traditional_Chinese.ini
  • lang/Turkish.ini
  • lang/Ukrainian.ini
  • lang/Urdu.ini
  • lang/Uyghur.ini
  • lang/Uzbek.ini
  • lang/Vietnamese.ini
  • lang/khmer.ini
  • translators.txt