Static task
static1
Behavioral task
behavioral1
Sample
sea_cucumber_type.exe
Resource
win7-20240221-en
General
-
Target
sea_cucumber_type.exe
-
Size
7.6MB
-
MD5
1dec00e6bf6d10f8b3b41fef07bdf08a
-
SHA1
66183e7ffcf40faf9f886e6f02df48d3ad07e2e5
-
SHA256
502db99a3b6d3b12424fec37a9b40de1507ad0537eda5cf275fb9b28357525f1
-
SHA512
7a7fd6ff2f3937f01ee9938bf0602c746c14a8088c7e19d213494cdfe0ccc9265fc5c4d86431426ac0080f532b2165373365a0348f5b72db782be33e1276f2bd
-
SSDEEP
98304:N9WbMWxTm6ytHdr2qybgsiefY3pso9Eu6MJtiiwSIFowAh3nxQeL8xbljjHS+:K9haHUQ3p7m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sea_cucumber_type.exe
Files
-
sea_cucumber_type.exe.exe windows:4 windows x64 arch:x64
27b80fa487e99f499aa8280849ee499d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
dwmapi
DwmEnableBlurBehindWindow
gdi32
ChoosePixelFormat
CreateRectRgn
DeleteObject
DescribePixelFormat
GetDeviceCaps
GetPixelFormat
SetPixelFormat
SwapBuffers
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
CloseHandle
CreateFileMappingA
CreateFileW
CreateMutexA
CreateThread
CreateToolhelp32Snapshot
DeviceIoControl
DuplicateHandle
ExitProcess
FormatMessageW
FreeLibrary
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableW
GetFileInformationByHandle
GetFullPathNameW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetSystemInfo
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MapViewOfFile
Module32FirstW
Module32NextW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
RtlCaptureContext
RtlLookupFunctionEntry
SetLastError
SetThreadErrorMode
SetThreadStackGuarantee
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnmapViewOfFile
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WriteConsoleW
lstrlenW
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
RaiseException
RtlAddFunctionTable
RtlUnwindEx
RtlVirtualUnwind
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
__C_specific_handler
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop
shell32
DragFinish
DragQueryFileW
ShellExecuteW
user32
AdjustWindowRectEx
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CloseTouchInputHandle
CreateIcon
CreateWindowExW
DefWindowProcW
DestroyIcon
DestroyWindow
DispatchMessageW
EmptyClipboard
GetActiveWindow
GetClassInfoExW
GetClassNameW
GetClientRect
GetClipCursor
GetClipboardData
GetCursorPos
GetDC
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageW
GetMonitorInfoW
GetRawInputData
GetSystemMetrics
GetTouchInputInfo
GetUpdateRect
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
InvalidateRgn
IsClipboardFormatAvailable
IsProcessDPIAware
LoadCursorW
MapVirtualKeyA
MapVirtualKeyW
MonitorFromRect
MonitorFromWindow
MsgWaitForMultipleObjectsEx
OpenClipboard
PeekMessageW
PostMessageW
PostThreadMessageW
RedrawWindow
RegisterClassExW
RegisterRawInputDevices
RegisterTouchWindow
RegisterWindowMessageA
ReleaseCapture
ScreenToClient
SendInput
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetForegroundWindow
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoA
ToUnicodeEx
TrackMouseEvent
TranslateMessage
ValidateRect
uxtheme
SetWindowTheme
winmm
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
bcrypt
BCryptGenRandom
msvcrt
__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_fpreset
_hypot
_initterm
_lock
_onexit
_unlock
abort
acosf
atan2f
atexit
calloc
ceil
ceilf
cosf
exit
expf
floor
floorf
fprintf
free
frexp
fwrite
malloc
memcmp
memcpy
memmove
memset
powf
signal
strlen
strncmp
vfprintf
opengl32
wglCreateContext
wglDeleteContext
wglGetCurrentContext
wglGetCurrentDC
wglGetProcAddress
wglMakeCurrent
wglShareLists
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/35 Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/51 Size: 664KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/63 Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/77 Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/89 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/102 Size: 485KB - Virtual size: 485KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/113 Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/124 Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ