bumblebee | 1fe0000_18d63eb629f741aa | Triage

Sharing

General

Target

1fe0000_18d63eb629f741aa
Size

1.0MB
MD5

e093f03219d5bc8a2035c48d392a5b95
SHA1

98399804f79482abbbfb1a18ea635b008106c8f9
SHA256

18d63eb629f741aa187b3703e7b6188c5c2df7752a4b9d5031241adea2bca5a6
SHA512

d4f372f71f3ac80e36a25d0d7786d1b5c9cfbcc3165d34577a4e1a761726e77b3d0853ac60f0b51d03fff7dfbecc72d3725d3e4b192aa51e4832b2bd4351d3f0
SSDEEP

24576:ZQwJD2Nste69sWB+BP9Zx/Df+USyq3h38JinNu2:Z9sE+t9Zx/CxyqRQin0

Score

10^/10

bumblebee

Malware Config

Signatures

Bumblebee family
bumblebee

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fe0000_18d63eb629f741aa

Files

1fe0000_18d63eb629f741aa
.dll windows:6 windows x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 634KB - Virtual size: 633KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ