FIT214R04[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

FIT214R04.exe
Size

920KB
MD5

92c89210bdca5fc8e21c57b7ae7dfaeb
SHA1

afb3209ba0130f247544d3aa336f1e0333332982
SHA256

28d3e3c5b4633c176668afa6262f71b155a30cd15efbfb3fb45539f803111a82
SHA512

090646ddd2a2e7ffeb7610f344627dcd3863a34ea4025b7ee6e5014ff9ebfef43edcbd13345a5eb3c6422503e8a514773c5461b613a86e9885759c558454295f
SSDEEP

12288:AFIpC5a8d/+kYj4OJ/TrITV5c6Ku2ZZgPrpF0L/50vDSoTBTs3C:KJ8Zku4OhTrITfYSrpW5wmoTBTiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FIT214R04.exe

Files

FIT214R04.exe
.exe windows x86

6dc3be474ceec6c7943e42a8d69c03b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
SetFileAttributesA
SetErrorMode
GetTickCount
RtlUnwind
IsBadReadPtr
HeapFree
RaiseException
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetFileType
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
TerminateProcess
HeapReAlloc
HeapSize
SetStdHandle
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetDriveTypeA
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
GetExitCodeProcess
CreateProcessA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetFullPathNameA
GetVolumeInformationA
MoveFileA
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
GetProfileStringA
DuplicateHandle
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
MulDiv
FreeLibrary
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
LockResource
FindResourceA
LoadResource
WaitForSingleObject
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GlobalReAlloc
lstrcpynA
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
LocalAlloc
LocalFree
lstrcpyA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetEndOfFile
lstrlenA
lstrcmpA
CreateThread
SetThreadPriority
ResumeThread
GetLastError
InterlockedExchange
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
CopyFileA
Sleep
GetFileAttributesA
FindClose
RemoveDirectoryA
FindFirstFileA
FindNextFileA
WriteFile
CreateFileA
GetFileSize
CloseHandle
SetFilePointer
ReadFile
GetComputerNameA
GetModuleFileNameA
lstrcatA
SetCurrentDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateDirectoryA
WritePrivateProfileStringA
GetCurrentDirectoryA
GetLocalTime
HeapDestroy
DeleteFileA

user32

CharUpperA
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
PtInRect
LoadCursorA
GrayStringA
DrawTextA
TabbedTextOutA
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
LoadStringA
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SendDlgItemMessageA
GetSysColor
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetTopWindow
GetCapture
WinHelpA
wsprintfA
SendMessageA
CreateWindowExA
GetWindowLongA
GetClientRect
DestroyWindow
MoveWindow
UnregisterClassA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetClassLongA
SetPropA
GetPropA
InflateRect
RegisterClipboardFormatA
MapWindowPoints
PostThreadMessageA
CallWindowProcA
RemovePropA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
wvsprintfA
PostMessageA
FindWindowA
SetTimer
KillTimer
MessageBoxA
UpdateWindow
InvalidateRect
ShowWindow
SetWindowLongA
GetSystemMetrics
RegisterClassA
DefWindowProcA
EndPaint
BeginPaint
LoadIconA
AppendMenuA
GetSystemMenu
GetDlgItem
DrawIcon
IsIconic
EnableWindow
MessageBeep
GetClassNameA
GetDesktopWindow
UnhookWindowsHookEx
PostQuitMessage
IsChild
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
SetCursor

gdi32

PatBlt
GetObjectA
LPtoDP
DPtoLP
GetBkColor
GetTextColor
Escape
ExtTextOutA
RectVisible
PtVisible
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
SelectObject
RestoreDC
SaveDC
DeleteDC
GetStockObject
TextOutA
SetBkColor
CreateBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
GetClipBox
SetTextColor
GetMapMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoInitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleFlushClipboard

olepro32

ord253

oleaut32

SysStringLen
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
GetErrorInfo
VariantClear

odbc32

ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord2
ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord18
ord13
ord61
ord16
ord5
ord10

wininet

InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetStatusCallback

Sections

.text
Size: 732KB - Virtual size: 730KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6dc3be474ceec6c7943e42a8d69c03b7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

odbc32

wininet

Sections

.text Size: 732KB - Virtual size: 730KB

.rdata Size: 104KB - Virtual size: 103KB

.data Size: 64KB - Virtual size: 86KB

.rsrc Size: 16KB - Virtual size: 13KB

.text
Size: 732KB - Virtual size: 730KB

.rdata
Size: 104KB - Virtual size: 103KB

.data
Size: 64KB - Virtual size: 86KB

.rsrc
Size: 16KB - Virtual size: 13KB