dialog
initDialog
show
Static task
static1
Behavioral task
behavioral1
Sample
gmod_9_0 (1).exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
bin/client.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
bin/game_shader_generic_garry.dll
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
bin/server.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
lua/Lua_Help.html
Resource
win7-20240221-en
Behavioral task
behavioral7
Sample
motd.html
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
readme.html
Resource
win7-20240221-en
Target
gmod_9_0 (1).exe
Size
24.1MB
MD5
77036ae6a3e3e214a6bb81a3910695c3
SHA1
f7bdc8199fd121366cfbfb28eed3dfa837972f0e
SHA256
008388b745eedb566f0e3fe98263da6807e6b3ac7687ff04a35cabc1dbb208d1
SHA512
2e5a47baa1a8633092d59a28333f4ff301dfdb86f82bdd01d1cd63034264672ace68304f2d568db1828808ec06e082487cdadb6a70963592c45add28b17cceae
SSDEEP
393216:eR25/LZWyTK0AF4wvzo5P8OdSquQlbspPtGzdU9QJN/dehhZ3oVF2jApsLLpBPyB:eM/LZm0gzUHApA+9QL/YUaAmpB0a114L
Checks for missing Authenticode signature.
resource |
---|
gmod_9_0 (1).exe |
unpack001/$PLUGINSDIR/InstallOptions.dll |
unpack001/bin/client.dll |
unpack001/bin/game_shader_generic_garry.dll |
unpack001/bin/server.dll |
resource | yara_rule |
---|---|
sample | nsis_installer_1 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
lstrcpynA
GetCommandLineA
CloseHandle
GetTempPathA
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
MulDiv
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClassA
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
FindWindowExA
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc
GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA
SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\workspace\garrysmod\src\cl_dll\cl_dll___Win32_HL2MP_Release\client.pdb
joyGetNumDevs
joyGetPosEx
joyGetDevCapsA
SetConsoleCtrlHandler
VirtualAlloc
VirtualProtect
RaiseException
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
Sleep
GetVersionExA
GetCommandLineA
CloseHandle
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
ReadFile
IsBadCodePtr
IsBadWritePtr
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetFilePointer
GetOEMCP
GetACP
SetUnhandledExceptionFilter
InterlockedExchange
RtlUnwind
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
WriteFile
DisableThreadLibraryCalls
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
GetFullPathNameA
GetLastError
LCMapStringA
IsBadReadPtr
ExitProcess
TerminateProcess
GetCurrentProcess
GetDriveTypeA
GetCurrentDirectoryA
GetSystemInfo
SystemParametersInfoA
Warning
DevMsg
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
g_VProfCurrentProfile
?ExitScope@CVProfile@@QAEXXZ
Error
?DevMsg@@YAXPBDZZ
DevWarning
MemFreeScratch
MemAllocScratch
GetCPUInformation
g_pMemAlloc
?DevWarning@@YAXPBDZZ
?FindOrCreateCounter@CVProfile@@QAEPAHPBDW4CounterGroup_t@@@Z
g_ClockSpeed
Msg
Q_stristr
CommandLine
Q_binarytohex
Q_FileBase
RandomFloat
Q_strncasecmp
Q_strncmp
Q_snprintf
Q_vsnprintf
RandomInt
Q_strcasecmp
Q_strncpy
Q_atoi
Q_MakeAbsolutePath
?AttachToStream@CGaussianRandomStream@@QAEXPAVIUniformRandomStream@@@Z
??0CGaussianRandomStream@@QAE@PAVIUniformRandomStream@@@Z
??0CUniformRandomStream@@QAE@XZ
?Q_stristr@@YAPBDPBD0@Z
Q_IsAbsolutePath
KeyValuesSystem
Q_strncat
Q_strcat
?RandomFloat@CGaussianRandomStream@@QAEMMM@Z
Q_strnlwr
Q_pretifymem
Q_strnicmp
Q_StripExtension
RandomSeed
Q_atof
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCPUInformation
GetStdHandle
GetSystemInfo
VirtualProtect
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetModuleHandleA
HeapAlloc
HeapFree
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
RaiseException
GetACP
GetOEMCP
GetCPInfo
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetLocaleInfoA
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\workspace\garrysmod\src\dlls\Release_hl2mp\server.pdb
timeEndPeriod
timeBeginPeriod
timeGetTime
GetLocaleInfoW
RtlUnwind
RaiseException
GetDriveTypeA
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
Sleep
FormatMessageA
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentDirectoryA
GetFullPathNameA
ExitProcess
TerminateProcess
SetConsoleCtrlHandler
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
SetEndOfFile
SetEnvironmentVariableA
SetStdHandle
IsBadCodePtr
IsBadWritePtr
GetCurrentThreadId
GetTickCount
GetOEMCP
GetACP
InterlockedExchange
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
CompareStringW
CompareStringA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetSystemInfo
VirtualAlloc
VirtualProtect
GetTimeZoneInformation
FlushFileBuffers
SetFilePointer
WriteFile
CreateFileA
GetFileAttributesA
GetCurrentProcessId
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
CloseHandle
ReadFile
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetVersionExA
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
MoveFileA
DeleteFileA
GetCurrentProcess
IsBadReadPtr
FindWindowA
SendMessageA
MessageBoxA
?DevWarning@@YAXPBDZZ
Msg
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
g_VProfCurrentProfile
?ExitScope@CVProfile@@QAEXXZ
g_ClockSpeedMillisecondsMultiplier
?DevMsg@@YAXPBDZZ
DevMsg
DevWarning
g_pVCR
?OutputReport@CVProfile@@QAEXHPBDH@Z
?BudgetGroupNameToBudgetGroupID@CVProfile@@QAEHPBD@Z
g_ClockSpeedSecondsMultiplier
Error
MemFreeScratch
MemAllocScratch
GetCPUInformation
g_pMemAlloc
Plat_FloatTime
?Pause@CVProfile@@QAEXXZ
?MarkFrame@CVProfile@@QAEXXZ
Warning
?Reset@CVProfNode@@QAEXXZ
?EnterScope@CVProfNode@@QAEXXZ
?Resume@CVProfNode@@QAEXXZ
vtune
Q_vsnprintf
Q_strncpy
Q_strncat
Q_snprintf
Q_strcasecmp
RandomInt
Q_StripFilename
Q_strnicmp
Q_strncmp
RandomSeed
RandomFloat
Q_FileBase
Q_binarytohex
Q_FixSlashes
Q_atoi
?Q_stristr@@YAPBDPBD0@Z
??0CUniformRandomStream@@QAE@XZ
CommandLine
Q_IsAbsolutePath
Q_atof
KeyValuesSystem
Q_strcat
Q_pretifymem
Q_strncasecmp
Q_stristr
Q_StripExtension
Q_ExtractFilePath
Q_SetExtension
recv
closesocket
WSAStartup
WSAGetLastError
select
send
gethostbyname
htons
getprotobyname
socket
ioctlsocket
connect
?Detonate@CGrenadeAR2@@UAEXXZ
?Detonate@CGrenadeHomer@@UAEXXZ
?Detonate@CGrenadePathfollower@@UAEXXZ
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ