Behavioral task
behavioral1
Sample
out_jaf1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
out_jaf1.dll
Resource
win10v2004-20220812-en
General
-
Target
out_jaf1.dll
-
Size
1.4MB
-
MD5
fa323fa38a6894cfd6725f2b235bc331
-
SHA1
fad0d061dee2fcf3c2db51a40087b49f6573a90f
-
SHA256
621c1fd331c2e5cfbea953c3e783f4f3bbf6600ef4bdcf9d09b227b6e8ae8413
-
SHA512
62ab22c7fdb1ca4a5044feff0034456eb151e91a4f87372b0bb1e2db094d1fdab149d1893ba90dd2ab40e0dcfba75d7856dbc20396a36f6f803fcb0242c7eb54
-
SSDEEP
24576:XgQw2TP5IRwHRwK2Lxsdlpr5+kHK9Zx/uqLIRMjI4i3v06HYtvkL:L9IROyfGlpRHK9Zx/FaMjIVvQM
Malware Config
Signatures
-
Bumblebee family
Files
-
out_jaf1.dll.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ