bumblebee | JaffaCakes118_dc3dc658341e1f23dc40e6abc96923aee7d932f74a2aad01d2fd22e03f9a45df | Triage

Sharing

General

Target

JaffaCakes118_dc3dc658341e1f23dc40e6abc96923aee7d932f74a2aad01d2fd22e03f9a45df
Size

2.3MB
MD5

e4d68f498d666f8c5989cf8cbba389a5
SHA1

ad8f3a0a90ab986f7aa31126a982c55307d8f7d8
SHA256

dc3dc658341e1f23dc40e6abc96923aee7d932f74a2aad01d2fd22e03f9a45df
SHA512

78339ae3fabee33a010236d450f92907606b44bb11fb185bcf84c55cc4678a5773541b3d99b5eb0300a554508269837598d03e821da113617f8802fa3685ac21
SSDEEP

49152:D7LVnxeXvsicNC7Nao9+4vMmuGxu1VQA0zZyciBn1qPGtUx:oZqNzYWVQJycs1tO

Score

10^/10

bumblebee

Malware Config

Signatures

Bumblebee family
bumblebee

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_dc3dc658341e1f23dc40e6abc96923aee7d932f74a2aad01d2fd22e03f9a45df

Files

JaffaCakes118_dc3dc658341e1f23dc40e6abc96923aee7d932f74a2aad01d2fd22e03f9a45df
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 651KB - Virtual size: 650KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ