Static task
static1
Behavioral task
behavioral1
Sample
HotlineMiami2.exe
Resource
win7-20231215-es
Behavioral task
behavioral2
Sample
HotlineMiami2.exe
Resource
win10v2004-20231215-es
General
-
Target
HotlineMiami2.exe
-
Size
16.9MB
-
MD5
57e80e3ab73693860c3e1d2d1fce820c
-
SHA1
babf7dc8ca439269c9dcd52d47e3a695d81d137c
-
SHA256
d1413a7b2bf5e6304e270a6b49d0b690de027b03b7018a1bc8ec6836818db811
-
SHA512
a9fafc4a3306d788f9ce4f3b3fa785b102bb63b01476c52c559db66ffad38baa8b1624c647c20417efddc34f2d009a945edcb478dc9f0a02cfa4f8abf956964c
-
SSDEEP
393216:KoPknePUFU1r7eKi0ny2CS9xQYOOYfvQS8ga5gubFkH3g+6WQ3W:K8eKi0ny2wOYfvQ5gaLFkH3g+6WQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HotlineMiami2.exe
Files
-
HotlineMiami2.exe.exe windows:6 windows x86 arch:x86
16c3db2e52a233547582a1fb03fb0f03
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glBindTexture
glDeleteTextures
glGetString
glGetIntegerv
glClear
glGenTextures
glTexImage2D
glTexParameteri
glTexSubImage2D
wglShareLists
wglMakeCurrent
wglGetProcAddress
wglDeleteContext
wglCreateContext
glViewport
glScissor
glDrawElements
glDrawArrays
glClearStencil
glDepthFunc
glClearDepth
glClearColor
glStencilOp
glStencilFunc
glFrontFace
glEnable
glDisable
glDepthMask
glew32
__glewBufferSubData
__glewBufferData
__glewDeleteBuffers
__glewRenderbufferStorageEXT
__glewGenRenderbuffersEXT
__glewGenFramebuffersEXT
__glewFramebufferTexture2DEXT
__glewFramebufferRenderbufferEXT
__glewDeleteFramebuffersEXT
__glewBindRenderbufferEXT
__glewBindFramebufferEXT
__glewActiveTexture
__glewGenBuffers
__glewDisableVertexAttribArray
__glewEnableVertexAttribArray
__glewVertexAttribPointer
__glewAttachShader
__glewBindAttribLocation
__glewCreateProgram
__glewDeleteProgram
__glewGetActiveUniform
__glewGetProgramInfoLog
__glewGetProgramiv
__glewGetUniformLocation
__glewLinkProgram
__glewUniform1fv
__glewUniform1i
__glewUniform2fv
__glewUniform3fv
__glewUniform4fv
__glewCompileShader
__glewUniformMatrix2fv
__glewUniformMatrix3fv
__glewUniformMatrix4fv
__glewCreateShader
__glewDeleteShader
__glewGetShaderInfoLog
__glewGetShaderiv
__glewShaderSource
__glewUseProgram
__glewValidateProgram
_glewInit@0
__glewBlendFuncSeparate
__glewBlendEquation
__glewBindBuffer
sdl2
SDL_InitSubSystem
SDL_GameControllerClose
SDL_GameControllerUpdate
SDL_GameControllerGetJoystick
SDL_GameControllerOpen
SDL_GameControllerAddMappingsFromRW
SDL_JoystickGetAttached
SDL_NumJoysticks
SDL_RWFromMem
SDL_free
SDL_malloc
SDL_SetRelativeMouseMode
SDL_GL_SwapWindow
SDL_GetDisplayMode
SDL_GetNumDisplayModes
SDL_GetWindowWMInfo
SDL_JoystickGetGUID
SDL_JoystickGetGUIDString
SDL_GameControllerGetAxis
SDL_GameControllerGetButton
SDL_HapticOpenFromJoystick
SDL_HapticClose
SDL_HapticRumbleInit
SDL_HapticRumblePlay
SDL_HapticRumbleStop
SDL_Init
SDL_WaitEvent
SDL_GL_DeleteContext
SDL_GL_SetSwapInterval
SDL_GL_MakeCurrent
SDL_GL_CreateContext
SDL_DestroyWindow
SDL_SetWindowFullscreen
SDL_GetWindowSize
SDL_SetWindowSize
SDL_SetWindowPosition
SDL_CreateWindow
SDL_WasInit
d3d9
Direct3DCreate9Ex
fmodex
?setDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@IH@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SOUND_FORMAT@@HHW4FMOD_DSP_RESAMPLER@@@Z
?setDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?getDriverCaps@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAIPAHPAW4FMOD_SPEAKERMODE@@@Z
?setFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDHPAIPAPAX2@ZP6G?AW43@PAX4@ZP6G?AW43@44I14@ZP6G?AW43@4I4@ZP6G?AW43@PAUFMOD_ASYNCREADINFO@@4@Z5H@Z
?setCallback@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PAUFMOD_SYSTEM@@W4FMOD_SYSTEM_CALLBACKTYPE@@PAX2@Z@Z
?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
FMOD_System_Create
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_CHANNELINDEX@@PAVSound@2@_NPAPAVChannel@2@@Z
?getDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@@Z
?setSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@@Z
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?close@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?update@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getMusicNumChannels@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?setMode@Sound@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?getDefaults@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAM00PAH@Z
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?createStream@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?setMode@Channel@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?isPlaying@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setPan@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setFrequency@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setVolume@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setPaused@Channel@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?stop@Channel@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getOpenState@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OPENSTATE@@PAIPA_N2@Z
?setLoopCount@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
d3dx9_43
D3DXCompileShader
freeimage
_FreeImage_ConvertTo32Bits@4
_FreeImage_GetBPP@4
_FreeImage_GetBits@4
_FreeImage_PreMultiplyWithAlpha@4
_FreeImage_GetWidth@4
_FreeImage_GetHeight@4
_FreeImage_GetFileTypeFromMemory@8
_FreeImage_LoadFromMemory@12
_FreeImage_CloseMemory@4
_FreeImage_OpenMemory@8
_FreeImage_Unload@4
kernel32
CreateDirectoryExA
RemoveDirectoryA
GetFileAttributesA
GetModuleHandleW
FreeLibrary
QueryPerformanceCounter
GetVersion
WaitForSingleObjectEx
ReleaseSemaphore
CreateSemaphoreA
GetUserDefaultLocaleName
SetThreadPriority
GetCurrentThreadId
Sleep
WaitForSingleObject
CloseHandle
InitializeConditionVariable
WakeAllConditionVariable
InitializeCriticalSection
DeleteCriticalSection
SleepConditionVariableCS
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FindClose
FindFirstFileA
FindNextFileA
GetTickCount
SetCurrentDirectoryW
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcessId
QueryPerformanceFrequency
GetSystemTimeAsFileTime
user32
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDisplayDevicesW
wsprintfW
SetWindowPos
DestroyWindow
CreateWindowExW
GetAsyncKeyState
RegisterClassW
DefWindowProcW
PostMessageW
ChangeDisplaySettingsExW
DispatchMessageW
GetMessageW
GetKeyboardLayout
GetKeyState
SetFocus
BringWindowToTop
ShowWindow
WaitMessage
GetMessageTime
SystemParametersInfoW
DestroyIcon
SetForegroundWindow
GetWindowLongW
SendMessageW
PeekMessageW
TrackMouseEvent
RegisterRawInputDevices
GetRawInputData
MapVirtualKeyW
WindowFromPoint
ClientToScreen
ClipCursor
SetCursor
SetCursorPos
ShowCursor
ReleaseCapture
SetCapture
LoadIconW
LoadCursorW
GetDesktopWindow
SetWindowLongW
ScreenToClient
GetCursorPos
AdjustWindowRectEx
TranslateMessage
GetWindowRect
GetClientRect
ReleaseDC
GetDC
UpdateWindow
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
UnregisterClassW
IsIconic
gdi32
GetDeviceCaps
CreateDCW
SetPixelFormat
SwapBuffers
SelectObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
DescribePixelFormat
SetDeviceGammaRamp
BitBlt
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
DragFinish
SHCreateDirectoryExA
DragAcceptFiles
DragQueryPoint
DragQueryFileW
SHGetKnownFolderPath
winmm
timeEndPeriod
timeBeginPeriod
msvcp110
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
msvcr110
_except_handler4_common
__crtTerminateProcess
__crtUnhandledException
strstr
_crt_debugger_hook
_vsnprintf
_commode
_fmode
_acmdln
__libm_sse2_pow
qsort
calloc
_strdup
strncmp
isspace
_aligned_malloc
realloc
ftell
free
__crtSetUnhandledExceptionFilter
_beginthreadex
_time64
srand
clock
_CxxThrowException
wcstombs_s
_i64toa
_snprintf_s
atof
_CIfmod
ceil
memset
__libm_sse2_atan2
rand
??_V@YAXPAX@Z
memcpy
__CxxFrameHandler3
memmove
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
_invoke_watson
_controlfp_s
sscanf
_getcwd
fclose
fflush
fopen
fread
__libm_sse2_sin
fseek
fwrite
memchr
wcstok
_wgetcwd
fprintf
sscanf_s
_vsnprintf_s
_wassert
isalpha
isalnum
tolower
strchr
_lock
_unlock
_calloc_crt
__dllonexit
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_ismbblead
_cexit
_exit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
malloc
Sections
.text Size: 13.9MB - Virtual size: 13.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ