dialog
initDialog
show
Overview
overview
7Static
static
3gaybee_001.exe
windows7-x64
7gaybee_001.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3bin/client.dll
windows7-x64
1bin/client.dll
windows10-2004-x64
1bin/server.dll
windows7-x64
1bin/server.dll
windows10-2004-x64
1scripts/settings.scr
windows7-x64
scripts/settings.scr
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
gaybee_001.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
gaybee_001.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
bin/client.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
bin/client.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
bin/server.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
bin/server.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
scripts/settings.scr
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
scripts/settings.scr
Resource
win10v2004-20231215-en
Target
gaybee_001.exe
Size
30.4MB
MD5
4594f9c06dbc92c7c9b243be01e852be
SHA1
db7dca44c7afafb1cc87cadec9b537a9f3631ff2
SHA256
ce50d84a9cebb38eadecbba3ad5561206fa285ef2dc616f81c7d629d5fa3455a
SHA512
89c3811dbec90ecf8e6e6fd842f693419b7a7b9b97f7acfcc625f6e8b4453e34aaf5b726b6e7e19c185149f7b0c65e401b52d55e809bcd431114f03a6c5bd0bb
SSDEEP
786432:8lMDyQb3g+zxIz3EuEemnsygnB/S9V4MIhvy1N8F95J:9DfV+zE6ygiVFIh88F9/
Checks for missing Authenticode signature.
resource |
---|
gaybee_001.exe |
unpack001/$PLUGINSDIR/InstallOptions.dll |
unpack001/bin/client.dll |
unpack001/bin/server.dll |
resource | yara_rule |
---|---|
sample | nsis_installer_1 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
CloseHandle
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
ExitProcess
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
CoTaskMemFree
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\gaybee\src\cl_dll\Release HL2\client.pdb
Sleep
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
CloseHandle
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
ReadFile
SetConsoleCtrlHandler
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
SetFilePointer
IsBadCodePtr
IsBadWritePtr
GetOEMCP
GetACP
InterlockedExchange
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetDateFormatA
GetTimeFormatA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
IsBadReadPtr
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
GetVersionExA
ExitProcess
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
FatalAppExitA
EnterCriticalSection
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
VirtualProtect
VirtualAlloc
GetSystemInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
SystemParametersInfoA
_AssertValidWritePtr
AssertValidStringPtr
_AssertValidReadPtr
?Lock@CThreadMutex@@QBEXXZ
DoNewAssertDialog
g_pMemAlloc
Warning
Msg
DevMsg
?DevWarning@@YAXPBDZZ
GetCPUInformation
g_ClockSpeed
MemAllocScratch
MemFreeScratch
?FindOrCreateCounter@CVProfile@@QAEPAHPBDW4CounterGroup_t@@@Z
_SpewInfo
_SpewMessage
ShouldUseNewAssertDialog
?Lock@CThreadMutex@@QAEXXZ
_ExitOnFatalAssert
CommandLine_Tier0
Error
?ExitScope@CVProfile@@QAEXXZ
g_VProfCurrentProfile
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
DevWarning
?DevMsg@@YAXPBDZZ
RandomInt
RandomSeed
RandomFloat
?AttachToStream@CGaussianRandomStream@@QAEXPAVIUniformRandomStream@@@Z
??0CGaussianRandomStream@@QAE@PAVIUniformRandomStream@@@Z
??0CUniformRandomStream@@QAE@XZ
?RandomFloat@CGaussianRandomStream@@QAEMMM@Z
?RandomFloat@CUniformRandomStream@@UAEMMM@Z
?SetSeed@CUniformRandomStream@@UAEXH@Z
KeyValuesSystem
GetCVarIF
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\gaybee\src\dlls\Release HL2\server.pdb
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
VirtualQuery
HeapAlloc
GetProcessHeap
Sleep
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
ReadFile
SetConsoleCtrlHandler
GetDateFormatA
GetTimeFormatA
SetFilePointer
GetSystemInfo
VirtualAlloc
VirtualProtect
IsBadCodePtr
IsBadWritePtr
GetOEMCP
GetACP
InterlockedExchange
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
GetLastError
LCMapStringA
SetUnhandledExceptionFilter
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
GetCurrentProcess
IsBadReadPtr
RtlUnwind
RaiseException
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetTimeZoneInformation
SendMessageA
FindWindowA
wsprintfA
MessageBoxA
MemFreeScratch
?Lock@CThreadMutex@@QAEXXZ
?Lock@CThreadMutex@@QBEXXZ
vtune
?Resume@CVProfNode@@QAEXXZ
?EnterScope@CVProfNode@@QAEXXZ
?Reset@CVProfNode@@QAEXXZ
?MarkFrame@CVProfile@@QAEXXZ
?Pause@CVProfile@@QAEXXZ
Plat_FloatTime
CommandLine_Tier0
_SpewInfo
_SpewMessage
ShouldUseNewAssertDialog
DoNewAssertDialog
_ExitOnFatalAssert
MemAllocScratch
?BudgetGroupNameToBudgetGroupID@CVProfile@@QAEHPBD@Z
?OutputReport@CVProfile@@QAEXHPBDH@Z
Plat_MSTime
DevWarning
DevMsg
?DevWarning@@YAXPBDZZ
g_pVCR
?DevMsg@@YAXPBDZZ
?ExitScope@CVProfile@@QAEXXZ
g_VProfCurrentProfile
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
g_ClockSpeedMillisecondsMultiplier
Msg
Error
Warning
g_pMemAlloc
GetCPUInformation
_AssertValidWritePtr
AssertValidStringPtr
g_ClockSpeedSecondsMultiplier
_AssertValidReadPtr
??0CUniformRandomStream@@QAE@XZ
GetCVarIF
RandomSeed
RandomFloat
RandomInt
KeyValuesSystem
?Detonate@CGrenadeAR2@@UAEXXZ
?Detonate@CGrenadeHomer@@UAEXXZ
?Detonate@CGrenadePathfollower@@UAEXXZ
CreateInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ