dataCheck
setPath
Behavioral task
behavioral1
Sample
BumbleBee.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
BumbleBee.dll
Resource
win10v2004-20220901-en
Target
BumbleBee.dll
Size
1.3MB
MD5
2683b6adae3a5c0b2ac195766f0f5ede
SHA1
1cf5bb61caf94d9b0d91452bdb9fa127473e1dce
SHA256
553c824326af8c08572dbb679df0b9ae772cb9811fd5f3b8454c34ed9891441f
SHA512
382c1af3864ff543a9f014d78029655288c6915150d5df38dce583c307089da0d60256e3a60c4b4d6f0818a6c9ad92254a578010d0d7f3c59ff85a88c9231b70
SSDEEP
24576:DRR7fW2rk/sMBwNUY89q49Zx/0ISSMca+ZVw5wjxz:/M9Bt7q49Zx/nLMx+zwGjp
bumblebee
legi
172.86.121.59:443
91.245.254.97:443
172.86.121.56:443
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CertCreateCertificateChainEngine
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
InitSecurityInterfaceA
GetFileAttributesA
GetCurrentProcess
ResumeThread
CreateEventW
SetEvent
GetThreadContext
GetProcAddress
GetModuleHandleW
SetThreadContext
SetWaitableTimer
TlsSetValue
SetLastError
EnterCriticalSection
CreateWaitableTimerW
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetQueuedCompletionStatus
PostQueuedCompletionStatus
FormatMessageW
GetLastError
TerminateThread
TlsAlloc
QueueUserAPC
LocalFree
DeleteCriticalSection
VerSetConditionMask
WideCharToMultiByte
SleepEx
VerifyVersionInfoW
TlsGetValue
TlsFree
FormatMessageA
CreateIoCompletionPort
AreFileApisANSI
ReadFile
SetHandleInformation
CreateNamedPipeA
WriteFile
TerminateProcess
GetCurrentThreadId
GetSystemDirectoryW
MultiByteToWideChar
CreateFileA
GetEnvironmentStrings
CreateProcessA
FreeEnvironmentStringsA
GetExitCodeProcess
LoadLibraryW
Sleep
OpenProcess
Thread32First
GetModuleHandleA
LoadLibraryA
VirtualProtectEx
OpenThread
HeapFree
VirtualAlloc
lstrlenA
HeapReAlloc
HeapAlloc
GetProcessHeap
GetModuleFileNameA
GetModuleFileNameW
SetFilePointer
CreateFileW
lstrcmpA
VirtualProtect
VirtualFree
GetStdHandle
WriteConsoleW
SetFilePointerEx
HeapSize
SetStdHandle
CloseHandle
CreateToolhelp32Snapshot
WaitForSingleObject
GetCurrentProcessId
lstrcatA
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
Thread32Next
FindFirstFileExA
FindClose
GetTimeZoneInformation
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetACP
ExitProcess
GetModuleHandleExW
ExitThread
RtlUnwindEx
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
GetVersionExW
LoadLibraryExW
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
GetCurrentThread
RtlPcToFileHeader
EncodePointer
DecodePointer
RaiseException
QueryPerformanceCounter
QueryPerformanceFrequency
TryEnterCriticalSection
GetSystemTimeAsFileTime
GetTickCount
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InitializeSListHead
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
LookupPrivilegeValueW
SHGetSpecialFolderPathA
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
VariantClear
SysAllocString
SysFreeString
VariantInit
WSAGetLastError
setsockopt
ioctlsocket
freeaddrinfo
getsockopt
WSARecv
connect
getaddrinfo
WSASocketW
WSASetLastError
shutdown
select
WSASend
closesocket
WSACleanup
WSAStartup
RpcServerUseProtseqEpA
RpcServerListen
RpcServerRegisterIfEx
RpcBindingFree
NdrServerCall2
dataCheck
setPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ