General

  • Target

    GDHM_TASBOT_v36.11.zip

  • Size

    140.5MB

  • MD5

    8c570b0633cc2d25fab1f290ab9db985

  • SHA1

    3a8e487d932b5f8745ceb01bbd623f0d5c04531b

  • SHA256

    b0da684a787b9e6db4d11befffb4560ff45cdb9fb34e40549c75f63daaa194b8

  • SHA512

    f62dd31d086ea1b53dd46d104e74dc543201dec6c36c98a9119f8b5c4e26c8dcc2f834cbb38f67e723195404e513c8c0f0a8003ae0895bdf80f6b69f5486c095

  • SSDEEP

    3145728:msMWtcoig7xhMJZHbCyItHFBsOBanA7/OeZahhypX64vF:msMWtdXOYHkOgAyeIhypX6C

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • GDHM_TASBOT_v36.11.zip
    .zip
  • GDHM_TASBOT_v36.11/.GDHM/.GDHM_uninstall.bat
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_CappucinoSDK.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_Kazmath.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_NSWFL.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_ProxyDll.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_ReplayBot.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_StackWalker.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_bada_pthread.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_cocos2d-x.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_cocosdenshion.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_cpp-httplib.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_curl.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_detours.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_discord-rpc.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_gd.h_combined.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_gd.h_pie.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_gdrpc.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_geode.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_imgui.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_jsoncpp.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_jsonhpp.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_kiero.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_libmem.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_libmem_new.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_minhook.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_openssl.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_pugixml.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_spdlog.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_toml11.txt
  • GDHM_TASBOT_v36.11/.GDHM/third_party_licenses/LICENSE_zlib.txt
  • GDHM_TASBOT_v36.11/.GDHM/tools/backup/msacm32.dll.bak
    .dll windows:6 windows x86 arch:x86

    5633319c28d2514cae6bf0126c1da38d


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.11/.GDHM/tools/backup/msacm32.dll.loader.bak
    .dll windows:6 windows x86 arch:x86

    ff2254b955841b66716ba336e93a1b35


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.11/.GDHM/tools/backup/pthreadVCE2.dll.bak
    .dll windows:4 windows x86 arch:x86

    3cb670276d26003b3e60cc547afc3c3e


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.11/RoastedMarshmellow.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections

  • GDHM_TASBOT_v36.11/ToastedMarshmellow.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • GDHM_TASBOT_v36.11/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    46e95598c82058b66dbe1c6512294f70


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.11/ffmpeg/ffmpeg.exe
    .exe windows:4 windows x64 arch:x64

    7f79a986d1250a6769db80418985e98e


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.11/icudtl.dat
  • GDHM_TASBOT_v36.11/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    d445fa16df485ec13a570c579e0fc7e5


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.11/libcef.dll
    .dll windows:5 windows x86 arch:x86

    5d187fae28656284846a7c1dc5fae256


    Headers

    Imports

    Exports

    Sections

  • GDHM_TASBOT_v36.11/locales/af.pak
  • GDHM_TASBOT_v36.11/locales/am.pak
  • GDHM_TASBOT_v36.11/locales/ar.pak
  • GDHM_TASBOT_v36.11/locales/bg.pak
  • GDHM_TASBOT_v36.11/locales/bn.pak
  • GDHM_TASBOT_v36.11/locales/ca.pak
  • GDHM_TASBOT_v36.11/locales/cs.pak
  • GDHM_TASBOT_v36.11/locales/da.pak
  • GDHM_TASBOT_v36.11/locales/de.pak
  • GDHM_TASBOT_v36.11/locales/el.pak
  • GDHM_TASBOT_v36.11/locales/en-GB.pak
  • GDHM_TASBOT_v36.11/locales/en-US.pak
  • GDHM_TASBOT_v36.11/locales/es-419.pak
  • GDHM_TASBOT_v36.11/locales/es.pak
  • GDHM_TASBOT_v36.11/locales/et.pak
    .ps1
  • GDHM_TASBOT_v36.11/locales/fa.pak
  • GDHM_TASBOT_v36.11/locales/fi.pak
  • GDHM_TASBOT_v36.11/locales/fil.pak
  • GDHM_TASBOT_v36.11/locales/fr.pak
  • GDHM_TASBOT_v36.11/locales/gu.pak
  • GDHM_TASBOT_v36.11/locales/he.pak
  • GDHM_TASBOT_v36.11/locales/hi.pak
  • GDHM_TASBOT_v36.11/locales/hr.pak
  • GDHM_TASBOT_v36.11/locales/hu.pak
  • GDHM_TASBOT_v36.11/locales/id.pak
  • GDHM_TASBOT_v36.11/locales/it.pak
  • GDHM_TASBOT_v36.11/locales/ja.pak
  • GDHM_TASBOT_v36.11/locales/kn.pak
  • GDHM_TASBOT_v36.11/locales/ko.pak
    .ps1
  • GDHM_TASBOT_v36.11/locales/lt.pak
  • GDHM_TASBOT_v36.11/locales/lv.pak
  • GDHM_TASBOT_v36.11/locales/ml.pak
  • GDHM_TASBOT_v36.11/locales/mr.pak
  • GDHM_TASBOT_v36.11/locales/ms.pak
    .ps1
  • GDHM_TASBOT_v36.11/locales/nb.pak
  • GDHM_TASBOT_v36.11/locales/nl.pak
  • GDHM_TASBOT_v36.11/locales/pl.pak
  • GDHM_TASBOT_v36.11/locales/pt-BR.pak
  • GDHM_TASBOT_v36.11/locales/pt-PT.pak
  • GDHM_TASBOT_v36.11/locales/ro.pak
  • GDHM_TASBOT_v36.11/locales/ru.pak
  • GDHM_TASBOT_v36.11/locales/sk.pak
  • GDHM_TASBOT_v36.11/locales/sl.pak
  • GDHM_TASBOT_v36.11/locales/sr.pak
  • GDHM_TASBOT_v36.11/locales/sv.pak
  • GDHM_TASBOT_v36.11/locales/sw.pak
  • GDHM_TASBOT_v36.11/locales/ta.pak
  • GDHM_TASBOT_v36.11/locales/te.pak
  • GDHM_TASBOT_v36.11/locales/th.pak
  • GDHM_TASBOT_v36.11/locales/tr.pak
  • GDHM_TASBOT_v36.11/locales/uk.pak
  • GDHM_TASBOT_v36.11/locales/ur.pak
  • GDHM_TASBOT_v36.11/locales/vi.pak
  • GDHM_TASBOT_v36.11/locales/zh-CN.pak
    .ps1
  • GDHM_TASBOT_v36.11/locales/zh-TW.pak
  • GDHM_TASBOT_v36.11/resources.pak
  • GDHM_TASBOT_v36.11/xinput9_1_0.dll
    .dll windows:6 windows x86 arch:x86

    fa2645f1904bcefa56bcf15ca3dde2b2


    Headers

    Imports

    Exports

    Sections