General

  • Target

    gaybee_001.exe

  • Size

    30.4MB

  • MD5

    4594f9c06dbc92c7c9b243be01e852be

  • SHA1

    db7dca44c7afafb1cc87cadec9b537a9f3631ff2

  • SHA256

    ce50d84a9cebb38eadecbba3ad5561206fa285ef2dc616f81c7d629d5fa3455a

  • SHA512

    89c3811dbec90ecf8e6e6fd842f693419b7a7b9b97f7acfcc625f6e8b4453e34aaf5b726b6e7e19c185149f7b0c65e401b52d55e809bcd431114f03a6c5bd0bb

  • SSDEEP

    786432:8lMDyQb3g+zxIz3EuEemnsygnB/S9V4MIhvy1N8F95J:9DfV+zE6ygiVFIh88F9/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • gaybee_001.exe
    .exe windows:4 windows x86 arch:x86

    dd1742eadfc6df18ded3c26ae64ad610


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • bin/client.dll
    .dll windows:4 windows x86 arch:x86

    9aba7addcf28647a3e1bc80985a41917


    Headers

    Imports

    Exports

    Sections

  • bin/server.dll
    .dll windows:4 windows x86 arch:x86

    380c162fb1a2bab7d371f02160ab7295


    Headers

    Imports

    Exports

    Sections

  • cfg/chapter1.cfg
  • cfg/chapter10.cfg
  • cfg/chapter11.cfg
  • cfg/chapter12.cfg
  • cfg/chapter13.cfg
  • cfg/chapter14.cfg
  • cfg/chapter16.cfg
  • cfg/chapter17.cfg
  • cfg/chapter18.cfg
  • cfg/chapter19.cfg
  • cfg/chapter2.cfg
  • cfg/chapter20.cfg
  • cfg/chapter21.cfg
  • cfg/chapter3.cfg
  • cfg/chapter4.cfg
  • cfg/chapter5.cfg
  • cfg/chapter6.cfg
  • cfg/chapter7.cfg
  • cfg/chapter8.cfg
  • cfg/chapter9.cfg
  • cfg/chapter9a.cfg
  • cfg/config_default.cfg
  • cfg/skill.cfg
  • cfg/skill_episodic.cfg
  • cfg/skill_manifest.cfg
  • cfg/steering_wheel.cfg
  • cfg/valve.rc
  • detail.vbsp
  • gameinfo.txt
  • hey what's up.txt
  • lights.rad
  • lostcoast_detail.vbsp
  • maps/soundcache/_other.cache
  • maps/soundcache/_other_rebuild.cache
  • maps/soundcache/_sharedprecache.cache
  • materials/console/gaybee.vmt
  • materials/console/gaybee.vtf
  • materials/console/gaybee_widescreen.vmt
  • materials/console/gaybee_widescreen.vtf
  • materials/console/intro.vmt
  • materials/console/intro.vtf
  • materials/console/intro_widescreen.vmt
  • materials/console/intro_widescreen.vtf
  • materials/vgui/chapters/chapter1.vmt
  • materials/vgui/chapters/chapter1.vtf
  • materials/vgui/chapters/chapter10.vmt
  • materials/vgui/chapters/chapter10.vtf
  • materials/vgui/chapters/chapter11.vmt
  • materials/vgui/chapters/chapter11.vtf
  • materials/vgui/chapters/chapter12.vmt
  • materials/vgui/chapters/chapter12.vtf
  • materials/vgui/chapters/chapter13.vmt
  • materials/vgui/chapters/chapter13.vtf
  • materials/vgui/chapters/chapter14.vmt
  • materials/vgui/chapters/chapter14.vtf
  • materials/vgui/chapters/chapter16.vmt
  • materials/vgui/chapters/chapter16.vtf
  • materials/vgui/chapters/chapter17.vmt
  • materials/vgui/chapters/chapter17.vtf
  • materials/vgui/chapters/chapter18.vmt
  • materials/vgui/chapters/chapter18.vtf
  • materials/vgui/chapters/chapter19.vmt
  • materials/vgui/chapters/chapter19.vtf
  • materials/vgui/chapters/chapter2.vmt
  • materials/vgui/chapters/chapter2.vtf
  • materials/vgui/chapters/chapter20.vmt
  • materials/vgui/chapters/chapter20.vtf
  • materials/vgui/chapters/chapter21.vmt
  • materials/vgui/chapters/chapter21.vtf
  • materials/vgui/chapters/chapter3.vmt
  • materials/vgui/chapters/chapter3.vtf
  • materials/vgui/chapters/chapter4.vmt
  • materials/vgui/chapters/chapter4.vtf
  • materials/vgui/chapters/chapter5.vmt
  • materials/vgui/chapters/chapter5.vtf
  • materials/vgui/chapters/chapter6.vmt
  • materials/vgui/chapters/chapter6.vtf
  • materials/vgui/chapters/chapter7.vmt
  • materials/vgui/chapters/chapter7.vtf
  • materials/vgui/chapters/chapter8.vmt
  • materials/vgui/chapters/chapter8.vtf
  • materials/vgui/chapters/chapter9.vmt
  • materials/vgui/chapters/chapter9.vtf
  • materials/vgui/chapters/chapter9a.vmt
  • materials/vgui/chapters/chapter9a.vtf
  • resource/ClientScheme.res
  • resource/CombinePanelScheme.res
  • resource/GameEvents.res
  • resource/GameMenu.res
  • resource/HL2EP1.ttf
  • resource/NewGameDialog.res
  • resource/SourceScheme.res
  • resource/bee.tga
  • resource/closecaption_english.txt
  • resource/gaybee_english.txt
  • resource/serverevents.res
  • resource/ui/BaseChat.res
  • resource/ui/ChatFilters.res
  • resource/ui/ClassMenu.res
  • resource/ui/MOTD.res
  • resource/ui/Plugin.res
  • resource/ui/PluginHud.res
  • resource/ui/PluginMenu.res
  • resource/ui/ScoreBoard.res
  • resource/ui/TextWindow.res
  • scripts/ChapterBackgrounds.txt
  • scripts/EngineVGUILayout.res
  • scripts/HudAnimations.txt
  • scripts/HudLayout.res
  • scripts/actbusy.txt
  • scripts/actremap.txt
  • scripts/addmount.txt
  • scripts/credits.txt
  • scripts/debugoptions.txt
  • scripts/decals.txt
  • scripts/decals_subrect.txt
  • scripts/dsp_presets.txt
  • scripts/effects/testeffect.txt
  • scripts/game_sounds.txt
  • scripts/game_sounds_ambient_generic.txt
  • scripts/game_sounds_header.txt
  • scripts/game_sounds_items.txt
  • scripts/game_sounds_manifest.txt
  • scripts/game_sounds_physics.txt
  • scripts/game_sounds_player.txt
  • scripts/game_sounds_ui.txt
  • scripts/game_sounds_vehicles.txt
  • scripts/game_sounds_weapons.txt
  • scripts/game_sounds_weapons_episodic.txt
  • scripts/game_sounds_world.txt
  • scripts/gameinfo.txt
  • scripts/global_actors.txt
  • scripts/hud_textures.txt
  • scripts/kb_act.lst
  • scripts/kb_def.lst
  • scripts/kb_keys.lst
  • scripts/level_sounds_aftermath_episodic.txt
  • scripts/level_sounds_breencast.txt
  • scripts/level_sounds_c17_02a.txt
  • scripts/level_sounds_canals.txt
  • scripts/level_sounds_canals2.txt
  • scripts/level_sounds_citadel.txt
  • scripts/level_sounds_coast.txt
  • scripts/level_sounds_e3_bugbait.txt
  • scripts/level_sounds_e3_c17.txt
  • scripts/level_sounds_e3_lab.txt
  • scripts/level_sounds_e3_town.txt
  • scripts/level_sounds_eli_lab.txt
  • scripts/level_sounds_k_lab.txt
  • scripts/level_sounds_k_lab2.txt
  • scripts/level_sounds_music.txt
  • scripts/level_sounds_music_episodic.txt
  • scripts/level_sounds_novaprospekt.txt
  • scripts/level_sounds_outland_episodic.txt
  • scripts/level_sounds_ravenholm.txt
  • scripts/level_sounds_ravenholm2.txt
  • scripts/level_sounds_streetwar.txt
  • scripts/level_sounds_streetwar2.txt
  • scripts/level_sounds_trainyard.txt
  • scripts/level_voices_episode_01.txt
  • scripts/level_voices_episode_02.txt
  • scripts/liblist.gam
  • scripts/npc_sounds_advisor.txt
  • scripts/npc_sounds_alyx.txt
  • scripts/npc_sounds_alyx_episodic.txt
  • scripts/npc_sounds_antlion.txt
  • scripts/npc_sounds_antlion_episodic.txt
  • scripts/npc_sounds_antlionguard.txt
  • scripts/npc_sounds_antlionguard_episodic.txt
  • scripts/npc_sounds_attackheli.txt
  • scripts/npc_sounds_barnacle.txt
  • scripts/npc_sounds_barney.txt
  • scripts/npc_sounds_birds.txt
  • scripts/npc_sounds_blackheadcrab.txt
  • scripts/npc_sounds_citizen.txt
  • scripts/npc_sounds_citizen_ep1.txt
  • scripts/npc_sounds_citizen_episodic.txt
  • scripts/npc_sounds_combine_ball.txt
  • scripts/npc_sounds_combine_ball_episodic.txt
  • scripts/npc_sounds_combine_mine.txt
  • scripts/npc_sounds_combinecamera.txt
  • scripts/npc_sounds_dog.txt
  • scripts/npc_sounds_dog_episodic.txt
  • scripts/npc_sounds_dropship.txt
  • scripts/npc_sounds_eli.txt
  • scripts/npc_sounds_env_headcrabcanister.txt
  • scripts/npc_sounds_fastheadcrab.txt
  • scripts/npc_sounds_fastzombie.txt
  • scripts/npc_sounds_gman.txt
  • scripts/npc_sounds_gunship.txt
  • scripts/npc_sounds_headcrab.txt
  • scripts/npc_sounds_ichthyosaur.txt
  • scripts/npc_sounds_manhack.txt
  • scripts/npc_sounds_metropolice.txt
  • scripts/npc_sounds_ministrider_episodic.txt
  • scripts/npc_sounds_poisonzombie.txt
  • scripts/npc_sounds_roller_episodic.txt
  • scripts/npc_sounds_rollermine.txt
  • scripts/npc_sounds_scanner.txt
  • scripts/npc_sounds_sniper.txt
  • scripts/npc_sounds_soldier.txt
  • scripts/npc_sounds_soldier_episodic.txt
  • scripts/npc_sounds_stalker.txt
  • scripts/npc_sounds_strider.txt
  • scripts/npc_sounds_strider_episodic.txt
  • scripts/npc_sounds_turret.txt
  • scripts/npc_sounds_turret_episodic.txt
  • scripts/npc_sounds_vortigaunt.txt
  • scripts/npc_sounds_zombie.txt
  • scripts/npc_sounds_zombine.txt
  • scripts/plugin_animations.txt
  • scripts/propdata.txt
  • scripts/screens/teleport_countdown_screen.res
  • scripts/screens/vgui_test_screen.res
  • scripts/sentences.txt
  • scripts/settings.scr
  • scripts/soundmixers.txt
  • scripts/soundscapes.txt
  • scripts/soundscapes_canals.txt
  • scripts/soundscapes_citadel.txt
  • scripts/soundscapes_citadel_episodic.txt
  • scripts/soundscapes_city_episodic.txt
  • scripts/soundscapes_coast.txt
  • scripts/soundscapes_elab.txt
  • scripts/soundscapes_klab.txt
  • scripts/soundscapes_manifest.txt
  • scripts/soundscapes_prison.txt
  • scripts/soundscapes_streetwar.txt
  • scripts/soundscapes_town.txt
  • scripts/soundscapes_trainyard.txt
  • scripts/surfaceproperties.txt
  • scripts/surfaceproperties_hl2.txt
  • scripts/surfaceproperties_manifest.txt
  • scripts/talker/interjections.txt
  • scripts/talker/nags.txt
  • scripts/talker/nags_canals.txt
  • scripts/talker/nags_citadel.txt
  • scripts/talker/nags_eli_lab.txt
  • scripts/talker/nags_k_lab.txt
  • scripts/talker/nags_prison.txt
  • scripts/talker/nags_trainyard.txt
  • scripts/talker/npc_alyx.txt
  • scripts/talker/npc_barney.txt
  • scripts/talker/npc_citizen.txt
  • scripts/talker/npc_citizen_c17.txt
  • scripts/talker/npc_citizen_canals.txt
  • scripts/talker/npc_citizen_coast.txt
  • scripts/talker/npc_citizen_commandermode.txt
  • scripts/talker/npc_citizen_tenement.txt
  • scripts/talker/npc_citizen_terminal.txt
  • scripts/talker/npc_combine.txt
  • scripts/talker/npc_grigori.txt
  • scripts/talker/npc_vortigaunt.txt
  • scripts/talker/response_eli_lab.txt
  • scripts/talker/response_k_lab.txt
  • scripts/talker/response_rules.txt
  • scripts/talker/terminal_pa.txt
  • scripts/titles.txt
  • scripts/vehicles/airboat.txt
  • scripts/vehicles/apc.txt
  • scripts/vehicles/apc_npc.txt
  • scripts/vehicles/cannon.txt
  • scripts/vehicles/crane.txt
  • scripts/vehicles/digger.txt
  • scripts/vehicles/driveway.txt
  • scripts/vehicles/fastdigger.txt
  • scripts/vehicles/jeep_test.txt
  • scripts/vehicles/jetski.txt
  • scripts/vehicles/prisoner_pod.txt
  • scripts/vehicles/reference_vehicle.txt
  • scripts/vgui_screens.txt
  • scripts/weapon_357.txt
  • scripts/weapon_alyxgun.txt
  • scripts/weapon_annabelle.txt
  • scripts/weapon_ar2.txt
  • scripts/weapon_bugbait.txt
  • scripts/weapon_citizenpackage.txt
  • scripts/weapon_citizensuitcase.txt
  • scripts/weapon_crossbow.txt
  • scripts/weapon_crowbar.txt
  • scripts/weapon_cubemap.txt
  • scripts/weapon_frag.txt
  • scripts/weapon_hopwire.txt
  • scripts/weapon_oldmanharpoon.txt
  • scripts/weapon_physcannon.txt
  • scripts/weapon_physgun.txt
  • scripts/weapon_pistol.txt
  • scripts/weapon_rpg.txt
  • scripts/weapon_shotgun.txt
  • scripts/weapon_smg1.txt
  • scripts/weapon_stunstick.txt
  • sound/common/talk.wav
  • sound/vehicles/digger_startengine1.wav
  • sound/vehicles/digger_stopengine1.wav
  • sound/weapons/flaregun/impact.wav
  • sound/weapons/physgun_loop1.wav
  • sound/weapons/physgun_loop2.wav
  • sound/weapons/physgun_loop3.wav
  • sound/weapons/physgun_loop4.wav
  • sound/weapons/physgun_off.wav
  • sound/weapons/physgun_on.wav
  • sound/weapons/pistol/pistol_empty.wav
  • sound/weapons/pistol/pistol_fire1.wav
  • sound/weapons/pistol/pistol_fire2.wav
  • sound/weapons/slam/buttonclick.wav
  • sound/weapons/slam/mine_mode.wav
  • sound/weapons/slam/throw.wav
  • sound/weapons/tripwire/hook.wav
  • sound/weapons/tripwire/mine_activate.wav
  • steam.inf