General

  • Target

    GDHM_TASBOT_v34.18.rar

  • Size

    36.3MB

  • MD5

    597e71cf8c5e5654e227ce036243e6bd

  • SHA1

    299c987e1fe2b47bf9f83b09c5723642e5712427

  • SHA256

    eec27970a9f566a885ec292568a3be1b01d8246907eaf319ad1889763c3239cf

  • SHA512

    3d23ac574c99a4caefc7cc044736bbf2bcf85e1838e330f52de4b82455279f904e35b6c04a444d2a682b849352c0b616b1035aa7653156596cd811e4ba5cee2e

  • SSDEEP

    786432:vkhMEfGhdXDjkypIvHAJJsCCv7tPF53HBrsyEF6DdMeub47Nl:vO9f6DjFpKWXCvN3hycdpd7r

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • GDHM_TASBOT_v34.18.rar
    .rar
  • GDHM_TASBOT_v34.18/.GDHM/.GDHM_Geometrize2GD.bat
  • GDHM_TASBOT_v34.18/.GDHM/.GDHM_uninstall.bat
  • GDHM_TASBOT_v34.18/.GDHM/mod/bypass.json
  • GDHM_TASBOT_v34.18/.GDHM/mod/core.json
  • GDHM_TASBOT_v34.18/.GDHM/mod/creator.json
  • GDHM_TASBOT_v34.18/.GDHM/mod/global.json
  • GDHM_TASBOT_v34.18/.GDHM/mod/player.json
  • GDHM_TASBOT_v34.18/.GDHM/mod/variables.json
  • GDHM_TASBOT_v34.18/.GDHM/tools/Geometrize2GD.py/gd_object.py
  • GDHM_TASBOT_v34.18/.GDHM/tools/Geometrize2GD.py/gd_object_dict.py
  • GDHM_TASBOT_v34.18/.GDHM/tools/Geometrize2GD.py/gd_pipe.py
  • GDHM_TASBOT_v34.18/.GDHM/tools/Geometrize2GD.py/main.py
  • GDHM_TASBOT_v34.18/.GDHM/tools/Geometrize2GD.py/pipe_name.config
  • GDHM_TASBOT_v34.18/.GDHM/tools/Geometrize2GD.py/requirements/install.bat
  • GDHM_TASBOT_v34.18/.GDHM/tools/Geometrize2GD.py/requirements/requirements.txt
  • GDHM_TASBOT_v34.18/.GDHM/tools/Geometrize2GD.py/sample.json
  • GDHM_TASBOT_v34.18/.GDHM/tools/backup/GDHM_CLIENT.exe
    .exe windows x86

    2e65c8be3d451499deddda40c57dc834


    Headers

    Imports

    Sections

  • GDHM_TASBOT_v34.18/.GDHM/tools/backup/msacm32.dll.bak
    .dll windows x86

    5633319c28d2514cae6bf0126c1da38d


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v34.18/.GDHM/tools/backup/pthreadVCE2.dll.bak
    .dll windows x86

    3cb670276d26003b3e60cc547afc3c3e


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_CappucinoSDK.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_Kazmath.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_NSWFL.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_ProxyDll.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_ReplayBot.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_StackWalker.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_bada_pthread.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_cocos2d-x.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_cocosdenshion.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_cpp-httplib.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_curl.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_detours.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_discord-rpc.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_gd.h_combined.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_gd.h_pie.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_gdrpc.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_imgui.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_jsoncpp.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_jsonhpp.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_kiero.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_libmem.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_libmem_new.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_minhook.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_openssl.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_pugixml.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_spdlog.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_toml11.txt
  • GDHM_TASBOT_v34.18/.tasbot/third_party_licenses/LICENSE_zlib.txt
  • GDHM_TASBOT_v34.18/RoastedMarshmellow.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • GDHM_TASBOT_v34.18/ToastedMarshmellow.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • GDHM_TASBOT_v34.18/ffmpeg/ffmpeg.exe
    .exe windows x64

    7f79a986d1250a6769db80418985e98e


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v34.18/msacm32.dll
    .dll windows x86

    ff2254b955841b66716ba336e93a1b35


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v34.18/tBot.dll
    .dll windows x86


    Headers

    Exports

    Sections