General

  • Target

    GDHM_TASBOT_v36.8.zip

  • Size

    139.1MB

  • MD5

    3b025fe4bc1f8273669b38984bd0176a

  • SHA1

    090a79938854d704360010619a965da3911837c7

  • SHA256

    f5df0d9546662d6718b42c48d328b9b7c8000f6c2044d37706cee24d9218626f

  • SHA512

    bd8aee8da6b20396d5ce5e293b769f75ca85273916ddca6abb3110ce9b453e62640b3b607664b6eaf0d7ed1e966c29a2041643672f2adc5bcfe4c528396e0247

  • SSDEEP

    3145728:5sMWtcbigAxhMJZHbCyItHFBsOBanNP9dAZa8luiCh:5sMWtkEOYHkOgNfArCh

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • GDHM_TASBOT_v36.8.zip
    .zip
  • GDHM_TASBOT_v36.8/.GDHM/.GDHM_uninstall.bat
  • GDHM_TASBOT_v36.8/.GDHM/mod/bypass.json
  • GDHM_TASBOT_v36.8/.GDHM/mod/core.json
  • GDHM_TASBOT_v36.8/.GDHM/mod/creator.json
  • GDHM_TASBOT_v36.8/.GDHM/mod/global.json
  • GDHM_TASBOT_v36.8/.GDHM/mod/player.json
  • GDHM_TASBOT_v36.8/.GDHM/mod/variables.json
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_CappucinoSDK.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_Kazmath.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_NSWFL.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_ProxyDll.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_ReplayBot.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_StackWalker.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_bada_pthread.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_cocos2d-x.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_cocosdenshion.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_cpp-httplib.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_curl.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_detours.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_discord-rpc.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_gd.h_combined.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_gd.h_pie.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_gdrpc.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_imgui.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_jsoncpp.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_jsonhpp.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_kiero.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_libmem.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_libmem_new.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_minhook.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_openssl.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_pugixml.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_spdlog.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_toml11.txt
  • GDHM_TASBOT_v36.8/.GDHM/third_party_licenses/LICENSE_zlib.txt
  • GDHM_TASBOT_v36.8/.GDHM/tools/backup/msacm32.dll.bak
    .dll windows:6 windows x86 arch:x86

    5633319c28d2514cae6bf0126c1da38d


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.8/.GDHM/tools/backup/msacm32.dll.loader.bak
    .dll windows:6 windows x86 arch:x86

    ff2254b955841b66716ba336e93a1b35


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.8/.GDHM/tools/backup/pthreadVCE2.dll.bak
    .dll windows:4 windows x86 arch:x86

    3cb670276d26003b3e60cc547afc3c3e


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.8/RoastedMarshmellow.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • GDHM_TASBOT_v36.8/ToastedMarshmellow.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • GDHM_TASBOT_v36.8/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    46e95598c82058b66dbe1c6512294f70


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.8/ffmpeg/ffmpeg.exe
    .exe windows:4 windows x64 arch:x64

    7f79a986d1250a6769db80418985e98e


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.8/icudtl.dat
  • GDHM_TASBOT_v36.8/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    d445fa16df485ec13a570c579e0fc7e5


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.8/libcef.dll
    .dll windows:5 windows x86 arch:x86

    5d187fae28656284846a7c1dc5fae256


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.8/locales/af.pak
  • GDHM_TASBOT_v36.8/locales/am.pak
  • GDHM_TASBOT_v36.8/locales/ar.pak
  • GDHM_TASBOT_v36.8/locales/bg.pak
  • GDHM_TASBOT_v36.8/locales/bn.pak
  • GDHM_TASBOT_v36.8/locales/ca.pak
  • GDHM_TASBOT_v36.8/locales/cs.pak
  • GDHM_TASBOT_v36.8/locales/da.pak
  • GDHM_TASBOT_v36.8/locales/de.pak
  • GDHM_TASBOT_v36.8/locales/el.pak
  • GDHM_TASBOT_v36.8/locales/en-GB.pak
  • GDHM_TASBOT_v36.8/locales/en-US.pak
  • GDHM_TASBOT_v36.8/locales/es-419.pak
  • GDHM_TASBOT_v36.8/locales/es.pak
  • GDHM_TASBOT_v36.8/locales/et.pak
    .ps1
  • GDHM_TASBOT_v36.8/locales/fa.pak
  • GDHM_TASBOT_v36.8/locales/fi.pak
  • GDHM_TASBOT_v36.8/locales/fil.pak
  • GDHM_TASBOT_v36.8/locales/fr.pak
  • GDHM_TASBOT_v36.8/locales/gu.pak
  • GDHM_TASBOT_v36.8/locales/he.pak
  • GDHM_TASBOT_v36.8/locales/hi.pak
  • GDHM_TASBOT_v36.8/locales/hr.pak
  • GDHM_TASBOT_v36.8/locales/hu.pak
  • GDHM_TASBOT_v36.8/locales/id.pak
  • GDHM_TASBOT_v36.8/locales/it.pak
  • GDHM_TASBOT_v36.8/locales/ja.pak
  • GDHM_TASBOT_v36.8/locales/kn.pak
  • GDHM_TASBOT_v36.8/locales/ko.pak
    .ps1
  • GDHM_TASBOT_v36.8/locales/lt.pak
  • GDHM_TASBOT_v36.8/locales/lv.pak
  • GDHM_TASBOT_v36.8/locales/ml.pak
  • GDHM_TASBOT_v36.8/locales/mr.pak
  • GDHM_TASBOT_v36.8/locales/ms.pak
    .ps1
  • GDHM_TASBOT_v36.8/locales/nb.pak
  • GDHM_TASBOT_v36.8/locales/nl.pak
  • GDHM_TASBOT_v36.8/locales/pl.pak
  • GDHM_TASBOT_v36.8/locales/pt-BR.pak
  • GDHM_TASBOT_v36.8/locales/pt-PT.pak
  • GDHM_TASBOT_v36.8/locales/ro.pak
  • GDHM_TASBOT_v36.8/locales/ru.pak
  • GDHM_TASBOT_v36.8/locales/sk.pak
  • GDHM_TASBOT_v36.8/locales/sl.pak
  • GDHM_TASBOT_v36.8/locales/sr.pak
  • GDHM_TASBOT_v36.8/locales/sv.pak
  • GDHM_TASBOT_v36.8/locales/sw.pak
  • GDHM_TASBOT_v36.8/locales/ta.pak
  • GDHM_TASBOT_v36.8/locales/te.pak
  • GDHM_TASBOT_v36.8/locales/th.pak
  • GDHM_TASBOT_v36.8/locales/tr.pak
  • GDHM_TASBOT_v36.8/locales/uk.pak
  • GDHM_TASBOT_v36.8/locales/ur.pak
  • GDHM_TASBOT_v36.8/locales/vi.pak
  • GDHM_TASBOT_v36.8/locales/zh-CN.pak
    .ps1
  • GDHM_TASBOT_v36.8/locales/zh-TW.pak
  • GDHM_TASBOT_v36.8/resources.pak
  • GDHM_TASBOT_v36.8/xinput9_1_0.dll
    .dll windows:6 windows x86 arch:x86

    fa2645f1904bcefa56bcf15ca3dde2b2


    Headers

    Imports

    Exports

    Sections