General

  • Target

    gdmo (1).zip

  • Size

    40.4MB

  • MD5

    1d22b71a6f7119dfd20e398bd57188c3

  • SHA1

    b737ee0d644ad6edb97acb596b7f1b0f83195e58

  • SHA256

    59f9229cca4719ae8bd7c75301805552d97b6ad93969bba7da1beb0748efa0ab

  • SHA512

    6481cf7ba012c9987724648aec64db5f92ee3416c70cec0c791c53642c631cb859e6b699fe6327d45a0da989ac762de283eb3d395ff49d1840f956112dd5274d

  • SSDEEP

    786432:cp3paigpsR6VyJj6KVUt3mUbhWQ/ymP/kOCm77Fxhm8z0nVaYYaVQMyTRDS0:uYdayZmUN/5FC+w8zvYYaVQMyTN

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • gdmo (1).zip
    .zip

    Password: elpapu

  • GDMenu.dll
    .dll windows:6 windows x86

    Password: elpapu

    2d227a4bfa4acfc39ee6190988114d6d


    Headers

    Imports

    Exports

    Sections

  • GDMenu/clicks/clicks/1.wav
  • GDMenu/clicks/clicks/2.wav
  • GDMenu/clicks/clicks/3.wav
  • GDMenu/clicks/mediumclicks/1.wav
  • GDMenu/clicks/mediumclicks/2.wav
  • GDMenu/clicks/mediumclicks/3.wav
  • GDMenu/clicks/releases/1.wav
  • GDMenu/clicks/releases/2.wav
  • GDMenu/clicks/releases/3.wav
  • GDMenu/mod/bypass.json
  • GDMenu/mod/creator.json
  • GDMenu/mod/global.json
  • GDMenu/mod/level.json
  • GDMenu/mod/player.json
  • GDMenu/mod/variables.json
  • GDMenu/windows.json
  • GDMenu/yt-dlp.exe
    .exe windows:4 windows x64

    Password: elpapu

    3281e2b0a8f23f346e1772f31393bc16


    Headers

    Imports

    Sections

  • __main__.pyc
  • INSTALLATION, credits and updates.txt
  • discord_game_sdk.dll
    .dll windows:6 windows x86

    Password: elpapu

    edfce0ff7a2d3e9b71bd116fc36e7bcb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.exe
    .exe windows:4 windows x64

    Password: elpapu

    7f79a986d1250a6769db80418985e98e


    Headers

    Imports

    Exports

    Sections

  • minhook.x32.dll
    .dll windows:6 windows x86

    Password: elpapu

    52c055e1ff53cb2f7ea2e1dcd98d19d5


    Headers

    Imports

    Exports

    Sections

  • xinput9_1_0.dll
    .dll windows:6 windows x86

    Password: elpapu

    acf0bcdeb101041b235d83f66eb3c5a5


    Headers

    Imports

    Exports

    Sections