DivineFIX2[.]exe | Triage

Sharing

General

Target

DivineFIX2.exe
Size

3.7MB
MD5

299d6c9057232caf1cf664bfe6d7af79
SHA1

aada34638d3f62b1eabfc7cb4a62be010a1b1bd2
SHA256

00b1eac24e44cea37697864be033fcb86ecc5b4333fc06f7c031ec7422b06945
SHA512

41f2957090fc9bec72d377a215d79ba5429de73483dcd3e9c02762101c62f8f03a54861a6a55a0216d2c2c91e9ada2ea1ccb912a0a90caf5d0f87d3b995754f5
SSDEEP

98304:nt21benq1upe+aykWNawjqdCm02p/vO/r8c2QFiFnidnZqu:no1bfK5kRZp/vOz8zQSd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DivineFIX2.exe

Files

DivineFIX2.exe
.exe windows:6 windows x64 arch:x64

94328699031991aadf039b7591ec3bcd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegQueryValueA

user32

DefWindowProcW

kernel32

GetModuleHandleA

shell32

ShellAboutA

Sections

Size: - Virtual size: 981KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE