General

  • Target

    bcc52e611994dc540931b6d87528cae0N.exe

  • Size

    9.0MB

  • MD5

    bcc52e611994dc540931b6d87528cae0

  • SHA1

    cd9f471371414b77110f85e15d51f2360e7b9e8a

  • SHA256

    0d6ba9719263051432e8f0089feaea2e348e191d9959460a9b9a386db4c65996

  • SHA512

    755ceabae2a9af3d61f62059cdbfff72f53f9b15127245449b15d792f9f6df598aa470639c1d5b5e1d208b17f28adfdd1856f5dc1d635498a95a1a438842793d

  • SSDEEP

    196608:45sswzqGrq521T1z61yyE9BS1IdnmUTjeX90IlFSwOKBKhcYWw+JVO:4WscdvTZ3ZHVJn20cFbKPB+TO

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • bcc52e611994dc540931b6d87528cae0N.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $APPDATA/oCam/Config.ini
  • $PLUGINSDIR/Aero.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    d1aa8caa8bcaabca0c6e1636efec6ec0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ToolTips.dll
    .dll windows:4 windows x86 arch:x86

    04338c58e26f4ac6ae89608ac6276429


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis-r.bmp
  • $PLUGINSDIR/orange-r.bmp
  • App/oCam/LibSSL/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    43b0fe249f8f5a5ce8ac2d967a025119


    Headers

    Imports

    Exports

    Sections

  • App/oCam/LibSSL/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    bb97df0f2e9321ec4e2256179b5b9c2c


    Headers

    Imports

    Exports

    Sections

  • App/oCam/language/Arabic.ini
  • App/oCam/language/Armenian.ini
  • App/oCam/language/Azerbaijan.ini
  • App/oCam/language/Bulgarian.ini
  • App/oCam/language/Catalan.ini
  • App/oCam/language/ChineseSimplified.ini
  • App/oCam/language/ChineseTraditional.ini
  • App/oCam/language/Danish.ini
  • App/oCam/language/Dutch.ini
  • App/oCam/language/French.ini
  • App/oCam/language/Greek.ini
  • App/oCam/language/Italian.ini
  • App/oCam/language/Japanese.ini
  • App/oCam/language/Portuguese.ini
  • App/oCam/language/Romanian.ini
  • App/oCam/language/Russian.ini
  • App/oCam/language/Spanish.ini
  • App/oCam/language/Thai.ini
  • App/oCam/language/Turkish.ini
  • App/oCam/language/Ukrainian.ini
  • App/oCam/language/Uyghur.ini
  • App/oCam/language/Uzbek.ini
  • App/oCam/language/english.ini
  • App/oCam/language/georgian.ini
  • App/oCam/language/german.ini
  • App/oCam/language/hungarian.ini
  • App/oCam/language/polish.ini
  • App/oCam/language/template.ini
  • App/oCam/oCam.exe
    .exe windows:5 windows x86 arch:x86

    c3c3f0fdd1949b361b822c6a0a5e0c5f


    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/CaptureSoundLib.dll
    .dll windows:5 windows x64 arch:x64

    13b28fed197a97340e1326f8f9122a3a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/FFMpegEncoder.dll
    .dll windows:6 windows x64 arch:x64

    304403791348e3a8eefe0cdb3e6e6b63


    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/HookSurface.exe
    .exe windows:6 windows x64 arch:x64

    2a005df50676787ffb8a0ea4dc2a7c08


    Code Sign

    Headers

    Imports

    Sections

  • App/oCam/v500.0x64/HookSurfaceDLL.dll
    .dll windows:6 windows x64 arch:x64

    7577c719d6d65271df904165e6a88d3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/ScreenCamcoder.dll
    .dll windows:5 windows x64 arch:x64

    f65bff981db628fc12b639026b3f1789


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/WASSoundLib.dll
    .dll windows:6 windows x64 arch:x64

    f29a7b6ded06f719b813b305e72748d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/avcodec-ocam-57.dll
    .dll windows:4 windows x64 arch:x64

    97ca95318e7986796afa6d5fe607ef2f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/avfilter-ocam-6.dll
    .dll windows:4 windows x64 arch:x64

    febb4bd6026020b825a8cfbe9a662349


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/avformat-ocam-57.dll
    .dll windows:4 windows x64 arch:x64

    c255af40dc00ef47b0ad4c83ef0cd1c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/avutil-ocam-55.dll
    .dll windows:4 windows x64 arch:x64

    2cb01453dd59594eeaacb4cef2e2a4e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/swresample-ocam-2.dll
    .dll windows:4 windows x64 arch:x64

    2c4b57643d6da903758d5ed10952c064


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x64/swscale-ocam-4.dll
    .dll windows:4 windows x64 arch:x64

    c14079d8da48ab96102fff8cd2a5ad14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/CaptureSoundLib.dll
    .dll windows:5 windows x86 arch:x86

    0ca407d67b3d0b928417f0961ec8204d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/DXGICapture.dll
    .dll windows:6 windows x86 arch:x86

    802c62968f147e659c6b25bdbcf8ea42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/FFMpegEncoder.dll
    .dll windows:6 windows x86 arch:x86

    5e9952bec347bb3073bbc4092bd26cac


    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/HookSurface.exe
    .exe windows:5 windows x86 arch:x86

    ec1b5083cfbde4c6ded71de747ca9b0c


    Code Sign

    Headers

    Imports

    Sections

  • App/oCam/v500.0x86/HookSurfaceDLL.dll
    .dll windows:5 windows x86 arch:x86

    76209b03ffe0f181a89dd279054a371b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/ScreenCamcoder.dll
    .dll windows:5 windows x86 arch:x86

    96a08d5c6ea4c90ec68b2fbb85b425a8


    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/WASSoundLib.dll
    .dll windows:5 windows x86 arch:x86

    ab04dbbe01f910609923a0ecb4491713


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/avcodec-ocam-57.dll
    .dll windows:4 windows x86 arch:x86

    0092fc5da03307ac8cdf1cbe34cf9c1e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/avfilter-ocam-6.dll
    .dll windows:4 windows x86 arch:x86

    f446e64bef27434349e4a47fe4516f66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/avformat-ocam-57.dll
    .dll windows:4 windows x86 arch:x86

    3e41205a066c21abbc05f5a6763134dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/avutil-ocam-55.dll
    .dll windows:4 windows x86 arch:x86

    6270e6fdd7dde998345f0dfdff16272c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/swresample-ocam-2.dll
    .dll windows:4 windows x86 arch:x86

    bcb12e3f92e313fbf6a6ec4cd3bfeefe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • App/oCam/v500.0x86/swscale-ocam-4.dll
    .dll windows:4 windows x86 arch:x86

    b5ec84f0abdff52029afeff5f3eb5c3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LibSSL/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    43b0fe249f8f5a5ce8ac2d967a025119


    Headers

    Imports

    Exports

    Sections

  • LibSSL/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    bb97df0f2e9321ec4e2256179b5b9c2c


    Headers

    Imports

    Exports

    Sections

  • language/Arabic.ini
  • language/Armenian.ini
  • language/Azerbaijan.ini
  • language/Bulgarian.ini
  • language/Catalan.ini
  • language/ChineseSimplified.ini
  • language/ChineseTraditional.ini
  • language/Danish.ini
  • language/Dutch.ini
  • language/French.ini
  • language/Greek.ini
  • language/Italian.ini
  • language/Japanese.ini
  • language/Portuguese.ini
  • language/Romanian.ini
  • language/Russian.ini
  • language/Spanish.ini
  • language/Thai.ini
  • language/Turkish.ini
  • language/Ukrainian.ini
  • language/Uyghur.ini
  • language/Uzbek.ini
  • language/english.ini
  • language/georgian.ini
  • language/german.ini
  • language/hungarian.ini
  • language/polish.ini
  • language/template.ini
  • oCam.exe
    .exe windows:5 windows x86 arch:x86

    c3c3f0fdd1949b361b822c6a0a5e0c5f


    Headers

    Imports

    Exports

    Sections

  • oCam_Portable.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Headers

    Imports

    Sections

  • v500.0x64/CaptureSoundLib.dll
    .dll windows:5 windows x64 arch:x64

    13b28fed197a97340e1326f8f9122a3a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x64/FFMpegEncoder.dll
    .dll windows:6 windows x64 arch:x64

    304403791348e3a8eefe0cdb3e6e6b63


    Headers

    Imports

    Exports

    Sections

  • v500.0x64/HookSurface.exe
    .exe windows:6 windows x64 arch:x64

    2a005df50676787ffb8a0ea4dc2a7c08


    Code Sign

    Headers

    Imports

    Sections

  • v500.0x64/HookSurfaceDLL.dll
    .dll windows:6 windows x64 arch:x64

    7577c719d6d65271df904165e6a88d3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x64/ScreenCamcoder.dll
    .dll windows:5 windows x64 arch:x64

    f65bff981db628fc12b639026b3f1789


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x64/WASSoundLib.dll
    .dll windows:6 windows x64 arch:x64

    f29a7b6ded06f719b813b305e72748d9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x64/avcodec-ocam-57.dll
    .dll windows:4 windows x64 arch:x64

    97ca95318e7986796afa6d5fe607ef2f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x64/avfilter-ocam-6.dll
    .dll windows:4 windows x64 arch:x64

    febb4bd6026020b825a8cfbe9a662349


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x64/avformat-ocam-57.dll
    .dll windows:4 windows x64 arch:x64

    c255af40dc00ef47b0ad4c83ef0cd1c1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x64/avutil-ocam-55.dll
    .dll windows:4 windows x64 arch:x64

    2cb01453dd59594eeaacb4cef2e2a4e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x64/swresample-ocam-2.dll
    .dll windows:4 windows x64 arch:x64

    2c4b57643d6da903758d5ed10952c064


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x64/swscale-ocam-4.dll
    .dll windows:4 windows x64 arch:x64

    c14079d8da48ab96102fff8cd2a5ad14


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/CaptureSoundLib.dll
    .dll windows:5 windows x86 arch:x86

    0ca407d67b3d0b928417f0961ec8204d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/DXGICapture.dll
    .dll windows:6 windows x86 arch:x86

    802c62968f147e659c6b25bdbcf8ea42


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/FFMpegEncoder.dll
    .dll windows:6 windows x86 arch:x86

    5e9952bec347bb3073bbc4092bd26cac


    Headers

    Imports

    Exports

    Sections

  • v500.0x86/HookSurface.exe
    .exe windows:5 windows x86 arch:x86

    ec1b5083cfbde4c6ded71de747ca9b0c


    Code Sign

    Headers

    Imports

    Sections

  • v500.0x86/HookSurfaceDLL.dll
    .dll windows:5 windows x86 arch:x86

    76209b03ffe0f181a89dd279054a371b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/ScreenCamcoder.dll
    .dll windows:5 windows x86 arch:x86

    96a08d5c6ea4c90ec68b2fbb85b425a8


    Headers

    Imports

    Exports

    Sections

  • v500.0x86/WASSoundLib.dll
    .dll windows:5 windows x86 arch:x86

    ab04dbbe01f910609923a0ecb4491713


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/avcodec-ocam-57.dll
    .dll windows:4 windows x86 arch:x86

    0092fc5da03307ac8cdf1cbe34cf9c1e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/avfilter-ocam-6.dll
    .dll windows:4 windows x86 arch:x86

    f446e64bef27434349e4a47fe4516f66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/avformat-ocam-57.dll
    .dll windows:4 windows x86 arch:x86

    3e41205a066c21abbc05f5a6763134dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/avutil-ocam-55.dll
    .dll windows:4 windows x86 arch:x86

    6270e6fdd7dde998345f0dfdff16272c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/swresample-ocam-2.dll
    .dll windows:4 windows x86 arch:x86

    bcb12e3f92e313fbf6a6ec4cd3bfeefe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • v500.0x86/swscale-ocam-4.dll
    .dll windows:4 windows x86 arch:x86

    b5ec84f0abdff52029afeff5f3eb5c3f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  •  oCam Screen Recorder.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InvokeShellVerb.dll
    .dll windows:4 windows x86 arch:x86

    d1aa8caa8bcaabca0c6e1636efec6ec0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp