Sample details: ff245173b8f22d4400e1194729796c79 --

Hashes
MD5: ff245173b8f22d4400e1194729796c79
SHA1: ff025a2b5bd7a414e608722632bbe31a5b476577
SHA256: 2d0a8b7c2c8c6a62550bdc6f4b0daffd4c79fe63cf85fbafc228f79dc8f62e74
SSDEEP: 12288:+9f+/RJi+8DipX884gC2PTlcZPXLAF/4CLvpU/hhbCno7iBggts:g+bvtpMKB4U5LvpU51kJBg
Details
File Type: PE32
Yara Hits
YRP/Microsoft_Visual_Basic_v50v60 | YRP/Microsoft_Visual_Basic_v50 | YRP/Microsoft_Visual_Basic_v50_v60 | YRP/Microsoft_Visual_Basic_v50_additional | YRP/Microsoft_Visual_Basic_v50v60_additional | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/HasRichSignature | YRP/domain | YRP/contentis_base64 | YRP/SEH__vba |
Source
http://hlotfer.pw/hlotfer.exe
http://hlotfer.pw/hlotfer.exe
Strings
		!This program cannot be run in DOS mode.
`.data
MSVBVM60.DLL
Fastigia
Gudinderne4
Sognerdsmedlemmernes
z;AvQ_x
"!w%RE
_Lxe[M
X*>eAS
nq,9-2
|BiQ2HD
91	iLM(
/@[sJ=
3whZSZv
&J+y(b
qS0+S,@
tl1#i-[
(&IHrt
zdL~3)?
Hsj#1q
9-S=(.XP
S1D,l2
~3f#&C
O[##;-
DP]_Wt
VvM	GN[
QoqaK s
:e3wTK
hEvI!i
n1 hE~
\Pu4|{
TDh 	:
8$lb[_r
o2Iz}x,
5xFDd5
6h-G	tMe
]+CAPdAc
DIS`.w
PCFUOTZF
p gsg&
Lp|L"p
CU0qb~
5Y7qQq
V+1t!E
c\	SAe
3;+y ~
.6DVxU
chRU[E
0VRp^K
I3O3S?6
>RFF}1
8U`H<ub
c,GBn3
f{h>cc
z0!D]:
]h95>ErQ
[nNH5H
4M9F'v
`8_nT^
N"S/c5
.yEC)|
-YI.eug
-.d7dU
u+L,@}>`
Zznt	I
u:jR_mK
>;EZ_pt
:1hZlS
hAUe*]
#l\=;f K
d?^]E{X
/DibW<A4
fq|M8?
]g\|F*
}x1lr5E
iOmMZg]
r^^S *$
Yus%?%-3
a:byx&
^5}V;?
Nh';'P
O g5H:
QY2IFB
vt(|dY]Z
f_x }c
>	-zus
1kWSdfF
n=#JVS
xF8HdW1
_YxY,O
b1/u yn
6kX=OY*
(zVVm\}|
fH/2QpE
>nB:~mo
YGcGiFeD
{<<mq3Y
?.+SJ=
SO<9h`
=,X4/'Do
2%(=Ip
t<ryCT<
^kWFD*
d98~*D
N2{|6%S
,n9``foo	
td974'
3h?cxN
CD)xQS
{(XQ@`V
@Z(yz,
3<P]EY
Q&LOYu>
Ez$/ 	_
J"Al<C
3%<51R{
_T}%~HT-
t58YOg
TO9ry'
K.:oQB:
gteVsGAb1
7+3E$Y
<]:a\m
Ae|Ux~c
)=xj3n
aC8W"t!
n+-vbe
VwQRR9
iZ izh
RK'`p i
Uu=8=C.925Y
J1BK1D}pmo
!]-fzA
oD+!\}
]lIKRi
eEOP]4e
i`WgOly
\Hs*gE
y#YKLK
2mxqqNS
5nKQ:q
a.0Da2
b{=_l^m
z8l68H
Cy/Bnu
m.#5g<
>a0.%AT
JS>/d-
3A<G{E
7t3!;x
S'V%q'
wlM4+N
%+N)x	k
9F$<~"m)
h%4H/'
4Uy[~]O
$fVKKK
j|2}P&9
6_2q,<
B~97>)!
usUH6X
?l4Fb%9
GtnTkU
v@$0@t
y JLLF
%]S/.R=+
wAr7l=P
WQXO.'
8|y*.A:
]gA9(P}iD
@iYxl@
%*0M]AL
]L\qPW|P
d}04/r
	(8r+k
A<;F,T
P:fwAg
=`yw<0b
;EU<JV
QGJ&:)
-a;vBH
WkEif+
HqtQ^4;C
UO`mhd
cz*f>L 
R='NT#4
YH\Jk;
!W	(Y7FQ
iLVyJ`
G(G=Ey
1ucjMC
0(D/Yq
LpZM0t
ZVd	na
T6sFy*
K4"^|`
/f9m>	|
}1"0ezC
=;V=_`
)cnU/B
TJpV-K
<sKb	\
]psbT	.
3Rfk=\H>
dT\(1@
HlVppt
`L/uj$
4i=z\q
/[8tg!*
{9AjyzN
>7\ Np
qrx"| 
xb+:En
)hlY{n
pXUE(>
zbA3nGj1>LB
^u)Bh]
aU!F!C
Be?Aw	
wvEEXx%
'=xK*_l
IggBWM
t3E)|F<
+Yx+|	*U
B+)Kgw
nx$!8^
Ccx)*x
)?+;jj
3nmLD0
9,$T,;B
A.zBR8
:x/* _|
v"$Y-(
5M1E|;]
;h:6- 
F-9d>{q
In^QLg
*5+Rp>
`	12F1
G0O,03T
wvB	)j
v2yJ+9
OVO_kK%y
h\VQLQB1
y5fFN;
`j#avW
!?|0"G&
ufdTJu
csPk6}K@
Z1$sgR
UG`"1 7xr
\%.-z[
0tZf\K
<_K2l@}H,
WuJbQy
O7u,EE
D)|sWr
sg8<%.
;,P}7,.
_G^f?P
h`1qwvG
|oY	5$
aNPZc]
%k"/2l
SeRR-S]
?}!*IR
vLQf' 
p,6V|`
XYC"4s
hb:^I7
Q>-UUW
=>i&D3
Tvw2oz
IDJfAF<J1
Wi24$o
j&C!(j
	@$hpv
}oeD'J
6ToNbG
&\RNs@E
m]_mgB2&b-
F-vBFAH
)q[)/m
=WL`X<u
yGx7EZ
?,5au0wO
D4ZB?=Ru
WE:4;#
Q2_>*Z
@|`_k.]
$c&zep
zeu[Db
oQ8CxaL$U
lPmhX,
{nj6vR8
.NE-#}
DkfoVtm
YlH#Cv
%u3T:`+
_c3x1_]
=yh3k=
! bOad
4E&tn	
&]E[8+
J.9,U6z~7
,b~"Q}
z(n=5@
m*sm*j
T<t@Ek#(
H6fjm?
J|Og60
.	q@h#
-XCxumN
S..@& 
(<D{vTGf
}+tAh>
hJ z	L
*k9n=e
n)yZvx
8UHby 
4)?4ryn
F>ukGj
LG RK}a
ER+Z^c
?DR?E6
;I[o 3
W*{8UEsh(}&
Q"	*h.
IrzB"P
h&r5K%
l)%PlE
S^B%qb
}KtRvzrsj]
Vg\jYl@Q!
w~D_K%
0A3[>hn76
u>w>1}
|{-z-?d
u6Q>&^
v'?1af
Pgx<Q`}
^.Kb'R
 <{M_u
#B@{x@
+E]Hra
ol1)QX
p0Prp,~
$ f{Vk3
10,3dO
Zn,%-0
.u&Fz!
%J$GQT5
v4IRx3
;f7**1
bFid#`+;d%
_DCQ7{n
DKgBaF.SZ
].K+%f
P)LVE%\
PlMBn7E9
fAr)oN
#Dwg~I1E
Ow@Ir=
t=45^#-
;BAdQe
{e^p2>V
2e]SR3L
^6GDb8b
Y~a!<b
PL4ILKy
F	bPD2B
.'cQVwL
]3u)	|^
;Bcj%v
o'QPA0g`
PDRcLC
F!)^z:
R5@PTap
1@p#\(,S
:&SU25z
OVJNM~
mY.oz;|RC<
<662H8
jD.9PB
2siw#	s
SJ?xn$\
VkW!3;p
u79kL|}lPf
(G/phA]
PP_tUHS
/XO.J1&7
FQXgZ1
uolS|@Y
(gTKpy1%
GaY/AoC
~?_fLC
H^rEn4^6!
<W<uRn
B5BV^E:c
AJN}Vl}e
W@UT\1
Az-t2X
X!O(j#
M0kGBoZ
Xjet*C&
?OeCiL
)^3b7'
j[GQE{
7t^N\/d%<
lh`*?cf(,
q 42#~
`H([^7
U]t}k(p
F3zx>u
U>/DDz
UEGf"]G
FOe9P&
ESC;jX
+	>`~2
mm7Z|8
Q HLIb
n^"Zj_
l\>XRz
C3bKG*
W%3oKRbN
4f;PwD
	O7p91C
	=(f93U,(
OT3Uko(d
4: @^%
/]*nwQ0T-
~mIRm?
1&RcMSYtB
8~X(Sv
X.iejh
as5;l=<'_%
53i}FY
6?K^mk
f*^*I|I
PCVy;o
6_kw$d
=38d.l#
qojHc@
T5qq`Zf
{,@=H_
}?B~0in
VMLf-8
5uQALSl
HmAe}?
wkZ1Jy
mtw&:y$
c<Zk0R
F&2rHn
~f,}jM
IwIep8A
~v)4!w
i`\3;3?
;zAC@N_
	`p sZN;
'2`eB1H/
<uWhRMu
AMC_NJ:~
EC`=oY
zI\cX<
4b]xMFC
.DUL)uR=
Xf$GB)
TEn&Ps<.
 |];8X
Fd#ICF
3=Q,h3
SBJ1d_
3`;R9M
;p4) m
T~vmv#
n'65i*
TF^([J
wAx.>	3
\%Pby3^v
,so2Y'A
S-$L1/
^$-7T@E
Z7uoGo&o
cS)pC|IT
<gJ/Rh
CgfXG2.E
cV^DO$
P_,s5F
~qz3*$
[N*d	T
F;G538]
BU!ed/
\5%X]+<
to	r/0
07EqaB
#P>O)]X
x#Yt9v%
(>39*\
.rWH=zx`V
zuSBV]
-~n]*c.
4Z17kD
) 	Fo>-4Dz
h3v n=
\.	UW?
Dj~z==
rnvla[
->~*#}
A\@j^>z
K[@rG`
\H]!\N
".E_?u
t5Rbm'+
|"mb]_r
)GX:J{n
]e%y?{_
7]'C/-A
j00E(g\S
/a04MI
;&/Vnp
.x3Q"U
.EO!><
'9c@$}
|&FS~N#
+SVXtx
'TUi!G
22FM&*
\uNK\`
c#$}qc
GY!(}R
+G[IGfW}
I}%wpi
ky3QZ@6
rK`y/>
cvEf+i
'HT`zy
YmTNFsO|
ojod>Jz"rH
UuF-3"
mg.O,.I
O9^PpW
7=$rkgC=
7fA H%T
@K=l02
+Wk'Ze
UtcA-U
s6kj3q
n<_h_I
G|;	fn
|dZ5o5Y
XoSHLg
MYuYTY
SX(o&mO
a9n0cP
#jcAJ=
Nw!ai^h
D$H!K5
v>r)i5U
rW95*E
]:2SR@
$~EBR5
j9N#SH=
CUk<<5
ggv(#~
@cE YpXH
./tigm
4fRqyYCp
F/yLN1
]jo 5&=#
~A*@dO
<e=`x}
q57bDK
@sK1$y
eh\ot&
Z"=vAa-F
=zOlz_O
v=fIgp
F(IB@M
9nt"pq![~
{/50*}5
N=pq|.
u]<o!kW>
;P}(wW
'zVjUy
5dim2H
S7Lz^=
*;	yi-
D?_ E)
vn[8J8_
l;?/`K
IluK25K,(
qk9t7}
zLxi&we
ZcfS9Q$
*"5!`?u
\ac3r{
ep&n~=@$k
,o_[y4N|T/
":V*@I]
BTxv?_
~@b'vT
kWTteK
Gko`,[:
=hGG`I
5lu q2
hEy8m_
k8	@6Q
jFRHDO
Ly/w|>
yV.3n0
YWUW1~
;,?\Qk0
cP6)ui<
k'p=] 
o\#cQ;
0?q'Og8
+K+n}J
pXaq+P
nYK?&u
J9;UX=
^A0J\P
C:U	~=%E
k}p0K	
-6Dw!j
\xR}(i
G@CV4#
`FE1`Z
ET5DZ~
A"'i}fO
H"hs|?
h?"fv|
V^TNik#
bfIrLZ
="At\	{
`OVk,?
_idRmv
 gh:BY
vLscLJ
JlRnrb
 $W4}`
_;AoB&
o@KOVYa
eJOt,3
:-F ,}
eIRxTh
$xP)cJL,N
gQdmG67
_X\/6]
{V@!([
ea9n~6H
v+NDBR
Pl2EOG
wsXbw:
<wRV%W
HE:Nme
;]=I-d
BF@a[E
D,` !Q
pK* >K
+MO[I4U
&GK%&W
ZUx' `ov
%r;r7:
ag6Fs+H
*P_6y:zG1
dBO~ AO
#L?( ,1
^ysI@	
OR1`:8
f$Ua !=
b6*T&h
!2G[6z
6aj"0|
\#GgsbOG
 d&c1i
)O}Mo6
Kx'{}P
rp+m^b<4
	<	)b9
!Ga`HE
L5zi'o7
zR">biRLy+
i;6vcMw
e+j4"Q{
HHug/1
{s-=v<
wO9Z:*
-rW	#Y 
aBNDWs
i6zJ`e
m"Jds u
 %[1S=(
8He1"c|
orm,=`
SBHk05
w2Nnw0c
VTpPlH
EiwC'R
=%:aqb
6xOh5vg
qa8\a`
,*whcB[
XkuR=5
3R|A#[
RE9w:k
\:fr=3
2I_%P2M
Qt8:XI
Aa@SIa|
:+fj''
azxi}"
&X#3bb
Bb7_A!
E'XvH!
9QW;@c
1'BPSr
i>c<k48
=xs)2w8+
G#X]+`
x)1SukBb
`Vb<I)
uO.I+F
M|[k;&T
+*]HY	
a}aXSB
*~ndor(
.606O<
N&>u'2
$ES>3.
^K:FO*
7\f<QR
OF&'Wc
v@hpXK~H
9aCpgL
'st#~k`
OLo4Yk
heFm[\
4ZO .6
\m"hP=
wi+GX!r
5ku}:TP
o;ZE.A_V
b)@?V+
q".$!7
`25`oK
3+A!?M
c|A9aS
Yt9U7j
rwT8YCy
Jz!*-M#
Y=K"@ x
'm5y D
	PZx<Z
a7` .fDM. <
xl%RFv
B!?	Cq
t8P42Mf*
R",SHP
,:7H))
'Hk+K,
8n+M~q
Uco"cj
QawVz`|
0-J<F3;
xVt&|w
	H{5X#
E3%rY]
=%wGVU
y'&'Of
0([1-o!
'pB2v}
bPGuoV
5l bBW9
uIatYm
F|R(kTgG
yN02x1
X'Ru>K
VGw(2C
LtCp]Y[
;pp vZ
[=z*?y
xbqU8@?nB'
ioWl0q
TyM4kJ
'N`>:[
tsv+/=u
Q Lje 
!d	Sl,
@8m3k1
n(SXwV
]Mu[36
X	zOlf
l	G:z%
nW[*uKQ
U4rMSC7bgp
WYX<qT
7wx10f
.]o)>~
($Pl@n
RaBppbJ
#>8-F1
\kk{rk
)EC%dS
R9$!_h4
&(?X5P
NzMahU
4xw3U,Z
oKJvP@
)th0 *X
|tp(4i
v3Fi|5
a1Cq#^;E19
zA"@gP=
o>#-/[
vN^##F
<.}fT>W
 Xo'3.
cfz|[u
|qa4J/
`)JTm	M
hp,*xD
P-oyC-
imqxLUMt
X-[XEE
8vVRCo
0=Bg^h3
Rgpsnd
3DZalu7d
"Y$D0i2
seBR9f
\YskMj
mD\T(Sk
8$,8v,
k{(0I2
%O[N_U
h15aG6
2sRe?S
]+MO+u7
:0Ir#g
d{>8ZS
2OCyAVy
`Fj6JE@
cc!,?*
%g)+3r
*iH4=!
@-4,WT
h}P>;W
*O|`C&C	
w*]pZk\
u<`ZBia{
gZJE:	
WkzkaN
s>WJ;V+,<
wr=GF}
#^_73[~
xy{;.H
z3+><n
%<!v*h
B=8|cf
l\+]T/
kp?w}-
.9Nj&<
2s"meb
AjVfZ=D
.`^~E2
\(_$D/
VgbyiY$Qm
0gD<|>
*]S&Jd
vp+N/ i
umbaDcv
nkYh7U
5/OAnK
]G2p+]
H`I{V"
8hH`[w
->1rgg
rC,/@=Pu
k5WwpKx
F\<"qOB
lObt"Z
T;OxbX
1eVh K
Av>+O!}
*YCC-5jj
iWvR/x
9o!C!Z%e
%^	A_/L:
i+OMx|
Y7YGn8a
^o~-l_s
g@Sug,iD
l`b%IQ
lt)2*4
"X4dI0`
CgP]rH
f-^f(1@
D=HH=s
7q/MV3
8T8.&!
	4[xVk
D;@/Wj
h^%& g^S
wID3q(F$pm
V0pD&K
pSt91Wk
rYwGEw:3
m~Ym'R
M2u5J4
>)8b}&+:(0
g8jBm;(
sdUZ=G
GgW$B:
~ >|-[(j9
xUXUqb
B/IvnY
|tV?y!
GpY3h#
VgN4Gq
yx,}Q#
GqIke!
tk\sUW_
I'}1k&h
bd}t{3U
1lv8PZ
F$=kv%
H2lXEOJ1
d!5j$!
#gl0`!
;x8eLw%
K]l\~U7#
Zun:Z3
?\,Ynh
[~l}37
~M=	~KI
[yvHEQ
n:4[#Z
P;cgo*
j-9@2]7@
b'!LfW.
Oi$	<R
RebW5t
lYI2Xo
q9+)x!
;s!Ek	GW
'\k:8m
9[#V3w
FrPJqJ
QaLn\b
#$RS[G
eu"JUh;
)v2}.W
;!OscG
%cm2(V
j]Lf -@
"]wADf
LxN/g	]
:ii>%5
%V>WhkEj6
9Np[3}i
W)&"[N
"m;?9o
:Y/cRx
"bGNYH
aVL8Pc
y4W]GG
}k-EI>
n}>&y+o	
sd.8f&-
	`$y~,
B"|A)|
<A~Wj%
QNJdvW`
.]o77E
f90`C7
trN1OT
jdAE0Whs4
p}J-BJ=
(}&6N=
a5BDyO
*[/:I 
TnCu)li
 uF${n
4`N}	~
wa6G{=UD
]'6E49
[$3M~h
8[GU7k
0Ej <9
\;K6a+
#-8\;c
#OSXO,v
}_m#%-
.I\!E5;|
t?8bwL
=Q`I4Z
UHB5aw
L@6.fb
%NGZsk
QWp}tq
p*>k |
MF<c.B
J `(y5a
T	NtP\
,>G^]L
|<t@D	W
QQb^jW
[v%||gMc
u)v5`3
'V,^GGN
jJ|`Px
Axh*&K
NFj"W_
ZZZZZZW_j
CreateFileMappingW
ooooooookernel32  
 MapViewOfFile
shell32
Shell_NotifyIconA
O0~	[C
TQfUTQbU 
XQ Y"Q Y&
 Yn^TD2
zj^r*&
\z4^r*&
 Yn\TP*
/s-DFq
?Ry%(s
ul0g(v=
pruttn
mttrqa
Vofode
efoooY
Yoooeb
V{{{wb
bo{{{Z
Z{{{w[
W|||wc
ew|||[
]|||w]
X|||wf
fw}|}b
^W||{b
X}}}xf
fx}}}^
_vy~zl
JHHH@@88141100--+***4%
7CC### #C
&<QIQIQU<
TGG;1	
NPKKOJ8A
PLKOK8:
POOPJ.9:STTR'
PTSPK.
.LTTR'
KSIKH.;
"!!$"!!
3;;==;=
PMJJH@/++((
-~<71)
$,,,2+	;44"
'IJKK*@I84
47@JB8
JEC<%>
EEE478J
~D;.))
}}|||@@@??:
/$)-h&
kA95*'!(
oooooooooo
^MTI13+/
oooooA,;2o
 [4\_o
oooo^$
('ooE65
}#vnz$urh$url$usn$utn$vto$vup$wvm$
Vermeils
Pretoken1
Indstvning8
Forfilteret3
Svovlples
Forrsag4
Funambulatory8
Tillgsmdes4
Pellar1
Udviklingsplanens6
Rringspunktets
Hjemkundskabens
Hylder8
Transplendency1
Gubbe7
VB5!6&*
Cerebrospinant5
Pacemake
Fastigia
Fastigia
Gudinderne4
Svovlples
C:\Program Files (x86)\Microsoft Visual Studio\VB98\VB6.OLB
Udviklingsplanens6
Transplendency1
Forfilteret3
Pretoken1
Hjemkundskabens
Funambulatory8
Forrsag4
Vermeils
MYOCX2.OCX
VBA6.DLL
__vbaAryDestruct
__vbaAryConstruct2
__vbaEnd
__vbaFreeObj
__vbaHresultCheckObj
__vbaNew2
MSVBVM60.DLL
_CIcos
_adj_fptan
__vbaEnd
_adj_fdiv_m64
_adj_fprem1
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaAryConstruct2
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
_CIatan
_allmul
_CItan
_CIexp
__vbaFreeObj
}#vnz$urh$url$usn$utn$vto$vup$wvm$
oooooooooo
^MTI13+/
oooooA,;2o
 [4\_o
oooo^$
('ooE65
/$)-h&
kA95*'!(
-~<71)
$,,,2+	;44"
'IJKK*@I84
47@JB8
JEC<%>
EEE478J
~D;.))
}}|||@@@??:
pruttn
mttrqa
Vofode
efoooY
Yoooeb
V{{{wb
bo{{{Z
Z{{{w[
W|||wc
ew|||[
]|||w]
X|||wf
fw}|}b
^W||{b
X}}}xf
fx}}}^
_vy~zl
JHHH@@88141100--+***4%
7CC### #C
&<QIQIQU<
TGG;1	
NPKKOJ8A
PLKOK8:
POOPJ.9:STTR'
PTSPK.
.LTTR'
KSIKH.;
"!!$"!!
3;;==;=
PMJJH@/++((