bumblebee | fa6317c30307a042576ff80c23b1f18a2d76109140d111dcdc5817540771f9e9 | Triage

Sharing

General

Target

fa6317c30307a042576ff80c23b1f18a2d76109140d111dcdc5817540771f9e9
Size

1.4MB
MD5

bdc65a5d36c15c0ab4d8454a79b11fa7
SHA1

33c62d3668119f4de181542aa59dbe17191537ba
SHA256

fa6317c30307a042576ff80c23b1f18a2d76109140d111dcdc5817540771f9e9
SHA512

042e860b1241bdb92c7caa8538304a8d1e5cfaea5a92daf113d5cf706ef7c111f5b4f9a5182d0116d9e45a351bb5dfcf463cdc5bab4c2a1a757f0f546ed1c2b4
SSDEEP

24576:LO2dVaRrhSk8Bhwm2z8f6ZzoIo9Zx/f9FwwxlXwcA6Ywbi:wrEk8wm2Yf6Zdo9Zx/nrxRK6F+

Score

10^/10

bumblebee

Malware Config

Signatures

Bumblebee family
bumblebee

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa6317c30307a042576ff80c23b1f18a2d76109140d111dcdc5817540771f9e9

Files

fa6317c30307a042576ff80c23b1f18a2d76109140d111dcdc5817540771f9e9
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 879KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 344KB - Virtual size: 343KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ