General

  • Target

    Bandicam 7.1.4.2458 (x64) Multilingual [pesktop.com].rar

  • Size

    30.5MB

  • MD5

    bdc8dfce29593536c36c4023d3258824

  • SHA1

    38b4c25886e303d791f70e31c26ba203d29cdbae

  • SHA256

    3c133f67bed07aa7eed0c030a130dcf7c72a24848e7ebc9a4e00102ad2f99cde

  • SHA512

    c9ae58013c848735efd853cc1e85dda746a0955a2715753fa1c1fae873deff0466e177157f48e48f910ff17af035b68dbd336930124f3aa1fc0c61d958aef669

  • SSDEEP

    786432:AGxoUF03hbgd8HTXIOdwF4a9pO3PPWc04cg2S4N:wIAgyNHaPOfgTS4N

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Bandicam 7.1.4.2458 (x64) Multilingual [pesktop.com].rar
    .rar

    Password: 123

  • Bandicam 7.1.4.2458 (x64) Multilingual [pesktop.com]/bdcamsetup.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    e2a592076b17ef8bfb48b7e03965a3fc


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellExecAsUser.dll
    .dll windows:5 windows x86 arch:x86

    Password: 123

    2302ef28d4d10b9da0f914a5921f3f3e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $SYSDIR/D3DCompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    Password: 123

    323b4a980be6850b6d140bd6363118e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcp110.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    098e9eddf1a24b3fd9465ee992148a02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    e057a95f8936f77238b048f253956b3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $SYSDIR/vcomp140.dll
    .dll windows:6 windows x86 arch:x86

    Password: 123

    4e2bdf3570f0309d9d2a75b473cb9395


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $TEMP/BDMPEG1SETUP.EXE
    .exe windows:5 windows x86 arch:x86

    b729b61eb1515fcf7b3e511e4e66258b


    Code Sign

    Headers

    Imports

    Sections

  • RegVulkanLayer.bat
  • UnregVulkanLayer.bat
  • bandicam.ini
  • bdcam.exe
    .exe windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Sections

  • bdcam32.bin
    .exe windows:6 windows x86 arch:x86

    86e98830c58db45ad869e1f39fb1bb4c


    Code Sign

    Headers

    Imports

    Sections

  • bdcam32.dll
    .dll windows:6 windows x86 arch:x86

    f4d2500fc24fb86c272939f523f99379


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcam64.dll
    .dll windows:6 windows x64 arch:x64

    3c271e7ac68c864783245b13ab70a3dd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamih.dll
    .dll windows:6 windows x64 arch:x64

    69c4f4f137d00b84d0d5904e859b2d0f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamvk32.dll
    .dll windows:6 windows x86 arch:x86

    74a469a209f3b0c49eefaeaff0412414


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamvk32.json
  • bdcamvk64.dll
    .dll windows:6 windows x64 arch:x64

    e590dcab07653ffb4a9bf78b482964df


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bdcamvk64.json
  • bdcap32.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Exports

    Sections

  • bdcap64.dll
    .dll windows:6 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • bdfix.exe
    .exe windows:6 windows x64 arch:x64

    62c4f5eab269919a48f8f2eb717e8739


    Code Sign

    Headers

    Imports

    Sections

  • data/camera.wav
  • data/effects/effects10.dat
  • data/effects/effects15.dat
  • data/effects/effects20.dat
  • data/effects/effects30.dat
  • data/effects/highlight10.dat
  • data/effects/highlight15.dat
  • data/effects/highlight20.dat
  • data/effects/highlight30.dat
  • data/language.dat
  • data/language_bdfix.dat
  • data/lclick.wav
  • data/rclick.wav
  • data/sample.png
    .png
  • data/skin.dat
    .zip
  • data/start.wav
  • data/stop.wav
  • encap64.dll
    .dll windows:6 windows x64 arch:x64

    4ddfeda0e3f67f8d6b297b90f1191d0a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • lang/Arabic.ini
  • lang/Armenian.ini
  • lang/Azerbaijani.ini
  • lang/Belarusian.ini
  • lang/Bosnian.ini
  • lang/Bulgarian.ini
  • lang/Burmese.ini
  • lang/Croatian.ini
  • lang/Czech.ini
  • lang/Danish.ini
  • lang/Dutch.ini
  • lang/English.ini
  • lang/Farsi.ini
  • lang/Finnish.ini
  • lang/French.ini
  • lang/Georgian.ini
  • lang/German.ini
  • lang/Greek.ini
  • lang/Hebrew.ini
  • lang/Hungarian.ini
  • lang/Indonesian.ini
  • lang/Italian.ini
  • lang/Japanese.ini
    .ps1
  • lang/Kazakh.ini
  • lang/Kurdish.ini
  • lang/Latvian.ini
  • lang/Lithuanian.ini
  • lang/Luxembourgish.ini
  • lang/Malay.ini
  • lang/Norwegian.ini
  • lang/Polish.ini
  • lang/Portuguese(BR).ini
  • lang/Portuguese.ini
  • lang/Romanian.ini
  • lang/Russian.ini
  • lang/Serbian(Cyrillic).ini
  • lang/Serbian.ini
  • lang/Simplified_Chinese.ini
  • lang/Sinhala.ini
  • lang/Slovak.ini
  • lang/Slovenian.ini
  • lang/Spanish.ini
  • lang/Swedish.ini
  • lang/Thai.ini
  • lang/Traditional_Chinese.ini
  • lang/Turkish.ini
  • lang/Ukrainian.ini
  • lang/Urdu.ini
  • lang/Uyghur.ini
  • lang/Uzbek.ini
  • lang/Vietnamese.ini
  • lang/khmer.ini
  • translators.txt
  • Bandicam 7.1.4.2458 (x64) Multilingual [pesktop.com]/reg.rar
    .rar
  • Visit www.pesktop.com.url
    .url