eudcedit[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

eudcedit.exe
Size

296KB
MD5

ea7665a5ffb3b16de571f6386bd76851
SHA1

ef68b45ea5f42cc859ba1c63e96b2cc72cf679d4
SHA256

9df01a528a262f4aab5eb53c9600ac0a2578cfa52b642a7e8a0fea3eae3b7f03
SHA512

cd3b17a9181f44760289ece8d146bb72b9355d58a99d80104a3c8205bde4e50fa8b78745682a62ac1ee6002bdfdf6252493539211869df6c736b5e23a5edcaf6
SSDEEP

6144:P+hDFDfhzsV+URf0MkW5VTHMLOKfN6rT6Nc4mE1PZSqtYVqu6:PqVAV+0y6rT6N913tYwu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eudcedit.exe

Files

eudcedit.exe
.exe windows x86

89ce6e83a7d65b7a667cbeb550cfc769

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameW
ChooseFontW
GetSaveFileNameW

comctl32

InitCommonControlsEx

shell32

SHCreateDirectoryExW
SHGetSpecialFolderPathW
ShellAboutW

gdi32

CreateSolidBrush
GetObjectW
GetTextExtentPoint32W
DeleteDC
CreateCompatibleDC
CreateBitmap
GetStockObject
GetBitmapBits
SetBitmapBits
BitBlt
StretchBlt
Rectangle
CreateCompatibleBitmap
PatBlt
CreatePolygonRgn
CreatePen
Ellipse
GetRgnBox
FillRgn
GetTextExtentExPointW
TranslateCharsetInfo
GetTextExtentPoint32A
ExtTextOutA
ExtTextOutW
OffsetRgn
GetTextMetricsW
GetLayout
DeleteObject
SetBkColor
SetTextColor
GetTextExtentPointW
EnumFontFamiliesW
EnableEUDC
CreateFontIndirectW
SelectObject
GetFontData

imm32

ImmConfigureIMEW
ImmEscapeW
ImmIsIME
ImmSetConversionStatus
ImmSetCompositionStringW
ImmDestroyContext
ImmGetConversionStatus
ImmCreateContext
ImmEnumRegisterWordW
ImmGetCompositionStringW
ImmAssociateContext
ImmRegisterWordW

ole32

CoInitialize
CoCreateInstance

msctf

TF_CreateInputProcessorProfiles
TF_CreateThreadMgr

oleaut32

SysAllocString
SysFreeString

advapi32

RegCloseKey
EventRegister
EventSetInformation
EventWriteTransfer
RegOpenKeyExW
RegQueryValueExW
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
EventUnregister

kernel32

TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
MultiByteToWideChar
GlobalAlloc
GetCurrentProcess
GlobalLock
GlobalUnlock
lstrcmpW
lstrlenW
GetACP
GetProcAddress
GetModuleHandleW
WideCharToMultiByte
GetTickCount
GetSystemWindowsDirectoryW
lstrcmpiW
CreateFileW
CloseHandle
lstrcmpA
CompareStringW
GetTempPathW
GetTempFileNameW
MoveFileExW
CreateFileMappingW
MapViewOfFile
SetUnhandledExceptionFilter
UnmapViewOfFile
WriteFile
FormatMessageW
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleExW
GetModuleFileNameA
DebugBreak
GetLastError
IsDebuggerPresent
OutputDebugStringW
SetLastError
ReleaseSemaphore
ReleaseMutex
WaitForSingleObjectEx
LocalAlloc
WaitForSingleObject
OpenSemaphoreW
LocalFree
LocalLock
LocalUnlock
InitOnceBeginInitialize
InitOnceComplete
GetCurrentProcessId
CreateMutexExW
CreateSemaphoreExW
ReadFile
SetFilePointer
HeapSetInformation
RegisterApplicationRestart
DeleteFileW
GetSystemDefaultLCID
MoveFileW
ExpandEnvironmentStringsW
UnhandledExceptionFilter
GetStartupInfoW
GetFileSize
Sleep
GlobalFree

user32

DrawMenuBar
DeleteMenu
IsIconic
IsZoomed
IsWindowVisible
SetRectEmpty
GetDialogBaseUnits
DispatchMessageW
TranslateMessage
PeekMessageW
GetSystemMetrics
SetActiveWindow
GetCapture
GetActiveWindow
SetForegroundWindow
FindWindowW
ShowScrollBar
ReleaseCapture
SetCapture
EqualRect
OffsetRect
InvertRect
ScreenToClient
GetCursorPos
UnionRect
CopyRect
SetClipboardData
EmptyClipboard
SetRect
EnumClipboardFormats
CloseClipboard
GetClipboardData
OpenClipboard
RegisterClipboardFormatW
LoadMenuW
SetCursor
DrawIcon
SetDlgItemTextW
ClientToScreen
UpdateWindow
LoadIconW
EnableScrollBar
GetWindowLongW
SetScrollInfo
DefWindowProcW
PostMessageW
GetWindow
GetWindowRect
GetDC
MessageBoxW
HideCaret
CreateWindowExW
SendMessageW
EndDialog
SetWindowTextW
MessageBeep
RegisterClassExW
LoadStringW
SetCaretPos
CreateCaret
GetKeyboardLayout
GetSysColor
IsWindowEnabled
SetFocus
BeginPaint
DestroyCaret
SetWindowLongW
GetDlgItem
ActivateKeyboardLayout
ShowCaret
DrawEdge
GetClassInfoExW
GetParent
DialogBoxParamW
PtInRect
InvalidateRect
IntersectRect
IsWindow
GetClientRect
GetDlgItemTextW
FillRect
LoadCursorW
GetKeyboardLayoutList
GetWindowTextW
EnableWindow
EndPaint
ReleaseDC

mfc42u

ord1569
ord5568
ord2910
ord1172
ord609
ord3567
ord4390
ord2566
ord6213
ord4142
ord2070
ord1150
ord3864
ord2383
ord5096
ord5099
ord3345
ord975
ord2875
ord4148
ord2375
ord5280
ord4431
ord5251
ord4422
ord3133
ord6819
ord4407
ord4495
ord6398
ord6399
ord5026
ord4294
ord4118
ord3491
ord4071
ord5996
ord5879
ord4143
ord2112
ord2119
ord2486
ord2618
ord2619
ord4140
ord4451
ord2084
ord807
ord554
ord402
ord4241
ord1851
ord2577
ord6150
ord2522
ord4359
ord4051
ord5467
ord4116
ord2381
ord5079
ord1702
ord1707
ord4398
ord5230
ord6365
ord5275
ord5254
ord2436
ord6065
ord6193
ord6063
ord3477
ord2072
ord4448
ord2109
ord3792
ord796
ord529
ord4260
ord1922
ord3737
ord5764
ord5869
ord6185
ord6126
ord324
ord641
ord1764
ord6362
ord2405
ord6051
ord4073
ord1768
ord4395
ord5237
ord2377
ord5157
ord6370
ord4347
ord5286
ord3793
ord4831
ord4435
ord2640
ord2047
ord6372
ord3744
ord5059
ord1720
ord5257
ord2438
ord2116
ord5273
ord2977
ord3142
ord3254
ord4459
ord3131
ord3257
ord2980
ord3076
ord2971
ord3397
ord3825
ord3826
ord3820
ord3074
ord4075
ord4621
ord4418
ord3634
ord818
ord567
ord692
ord540
ord800
ord4704
ord4155
ord6195
ord6237
ord5798
ord4219
ord1143
ord1165
ord5977
ord2637
ord3087
ord2634
ord4229
ord2854
ord3568
ord2385
ord2406
ord1560
ord268
ord3658
ord3621
ord1634
ord2855
ord2506
ord3592
ord4419
ord5276
ord4401
ord1767
ord6048
ord4992
ord5261
ord5949
ord4847
ord3093
ord4370
ord4215
ord2576
ord3649
ord2430
ord1850
ord4240
ord1637
ord1230
ord2093
ord4452
ord4282
ord289
ord613
ord1633
ord5781
ord3614
ord401
ord3566
ord323
ord640
ord3701
ord674
ord2444
ord2442
ord2397
ord3688
ord5784
ord5783
ord470
ord755
ord6168
ord5025
ord2371
ord5790
ord5871
ord5785
ord4292
ord4128
ord6115
ord2859
ord6390
ord5446
ord6928
ord6379
ord5436
ord4421
ord2437
ord5250
ord4430
ord1658
ord2641
ord5279
ord2374
ord5233
ord4072
ord4147
ord2873
ord2874
ord3398
ord5468
ord976
ord5006
ord3346
ord4298
ord4461
ord5098
ord5094
ord3054
ord2382
ord2715
ord5095
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord616
ord3716
ord795
ord6211
ord4269
ord4445
ord815
ord561
ord1197
ord2613
ord6113
ord2717
ord4692
ord3516
ord858
ord3517
ord535
ord3733
ord4616
ord5710
ord5285
ord5303
ord4074
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord1821
ord4270
ord3605
ord656
ord6125
ord6017

msvcrt

qsort
_callnewh
_XcptFilter
__p__commode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
__p__fmode
__setusermatherr
_initterm
_wcmdln
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_lock
_unlock
__dllonexit
_onexit
_controlfp
_except_handler4_common
memcpy
wcsstr
wcschr
wcstol
_wtoi
wcstok
_vsnprintf_s
memcpy_s
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
malloc
memcmp
_ftol2_sse
_CxxThrowException
free
wcsrchr
__CxxFrameHandler3
_vsnwprintf
memset

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89ce6e83a7d65b7a667cbeb550cfc769

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

comctl32

shell32

gdi32

imm32

ole32

msctf

oleaut32

advapi32

kernel32

user32

mfc42u

msvcrt

Sections

.text Size: 173KB - Virtual size: 173KB

.data Size: 2KB - Virtual size: 14KB

.idata Size: 9KB - Virtual size: 9KB

.rsrc Size: 94KB - Virtual size: 93KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 173KB - Virtual size: 173KB

.data
Size: 2KB - Virtual size: 14KB

.idata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 94KB - Virtual size: 93KB

.reloc
Size: 16KB - Virtual size: 15KB