Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
quotation RFQ no 123609.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\adstipulator
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\quotation RFQ no 123609.exe
|
"C:\Users\user\Desktop\quotation RFQ no 123609.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\quotation RFQ no 123609.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3880000
|
direct allocation
|
page read and write
|
|
|
|
400000
|
system
|
page execute and read and write
|
|
|
|
48DE000
|
direct allocation
|
page read and write
|
||
|
38D0000
|
direct allocation
|
page read and write
|
||
|
3E71000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
486D000
|
direct allocation
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
46C3000
|
direct allocation
|
page read and write
|
||
|
3800000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
110000
|
heap
|
page read and write
|
||
|
3E8B000
|
heap
|
page read and write
|
||
|
46C3000
|
direct allocation
|
page read and write
|
||
|
3E8C000
|
heap
|
page read and write
|
||
|
31D0000
|
heap
|
page read and write
|
||
|
4869000
|
direct allocation
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3600000
|
direct allocation
|
page read and write
|
||
|
100000
|
heap
|
page read and write
|
||
|
48DE000
|
direct allocation
|
page read and write
|
||
|
377E000
|
stack
|
page read and write
|
||
|
9E0000
|
heap
|
page read and write
|
||
|
3CD1000
|
direct allocation
|
page execute and read and write
|
||
|
3202000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3F0F000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
482000
|
unkown
|
page readonly
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3DBA000
|
heap
|
page read and write
|
||
|
486D000
|
direct allocation
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
3CE0000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
45A0000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3B33000
|
heap
|
page read and write
|
||
|
3DC6000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3405000
|
heap
|
page read and write
|
||
|
3501000
|
heap
|
page read and write
|
||
|
4740000
|
direct allocation
|
page read and write
|
||
|
4404000
|
heap
|
page read and write
|
||
|
4740000
|
direct allocation
|
page read and write
|
||
|
38D0000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
4740000
|
direct allocation
|
page read and write
|
||
|
3E01000
|
heap
|
page read and write
|
||
|
3DE3000
|
heap
|
page read and write
|
||
|
46C3000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3DC9000
|
heap
|
page read and write
|
||
|
2DD0000
|
heap
|
page read and write
|
||
|
38D0000
|
direct allocation
|
page read and write
|
||
|
2E50000
|
heap
|
page read and write
|
||
|
2DBE000
|
stack
|
page read and write
|
||
|
46C3000
|
direct allocation
|
page read and write
|
||
|
3EE4000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3B1A000
|
heap
|
page read and write
|
||
|
3CCD000
|
direct allocation
|
page execute and read and write
|
||
|
3EE0000
|
heap
|
page execute and read and write
|
||
|
45A0000
|
direct allocation
|
page read and write
|
||
|
3EE1000
|
heap
|
page read and write
|
||
|
486D000
|
direct allocation
|
page read and write
|
||
|
3600000
|
heap
|
page read and write
|
||
|
3417000
|
heap
|
page read and write
|
||
|
387F000
|
stack
|
page read and write
|
||
|
38D0000
|
direct allocation
|
page read and write
|
||
|
30F0000
|
heap
|
page read and write
|
||
|
30C0000
|
heap
|
page read and write
|
||
|
42E6000
|
heap
|
page read and write
|
||
|
3417000
|
heap
|
page read and write
|
||
|
3B9E000
|
direct allocation
|
page execute and read and write
|
||
|
3E21000
|
heap
|
page read and write
|
||
|
48DE000
|
direct allocation
|
page read and write
|
||
|
3EFF000
|
heap
|
page read and write
|
||
|
3DD0000
|
heap
|
page read and write
|
||
|
170000
|
heap
|
page read and write
|
||
|
399E000
|
heap
|
page read and write
|
||
|
4740000
|
direct allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3723000
|
heap
|
page read and write
|
||
|
1C0000
|
heap
|
page read and write
|
||
|
303D000
|
stack
|
page read and write
|
||
|
3DC0000
|
heap
|
page read and write
|
||
|
4869000
|
direct allocation
|
page read and write
|
||
|
307D000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
9EA000
|
heap
|
page read and write
|
||
|
46C3000
|
direct allocation
|
page read and write
|
||
|
15E000
|
stack
|
page read and write
|
||
|
46C3000
|
direct allocation
|
page read and write
|
||
|
486D000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
4740000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
486D000
|
direct allocation
|
page read and write
|
||
|
30A0000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page write copy
|
||
|
A19000
|
heap
|
page read and write
|
||
|
3400000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
3B2D000
|
direct allocation
|
page execute and read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3EF0000
|
heap
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
48DE000
|
direct allocation
|
page read and write
|
||
|
3EEE000
|
heap
|
page read and write
|
||
|
45A0000
|
direct allocation
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
38D0000
|
direct allocation
|
page read and write
|
||
|
399F000
|
stack
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
4740000
|
direct allocation
|
page read and write
|
||
|
39A5000
|
heap
|
page read and write
|
||
|
11DF000
|
stack
|
page read and write
|
||
|
2E54000
|
heap
|
page read and write
|
||
|
89F000
|
stack
|
page read and write
|
||
|
1BE000
|
stack
|
page read and write
|
||
|
38D0000
|
direct allocation
|
page read and write
|
||
|
45A0000
|
direct allocation
|
page read and write
|
||
|
486D000
|
direct allocation
|
page read and write
|
||
|
48DE000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
392D000
|
heap
|
page read and write
|
||
|
4869000
|
direct allocation
|
page read and write
|
||
|
15DE000
|
stack
|
page read and write
|
||
|
3405000
|
heap
|
page read and write
|
||
|
3BE0000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3DD9000
|
heap
|
page read and write
|
||
|
45A0000
|
direct allocation
|
page read and write
|
||
|
3D42000
|
direct allocation
|
page execute and read and write
|
||
|
8B4000
|
stack
|
page read and write
|
||
|
4869000
|
direct allocation
|
page read and write
|
||
|
3EE1000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3B10000
|
direct allocation
|
page read and write
|
||
|
3929000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
8AF000
|
stack
|
page read and write
|
||
|
373E000
|
stack
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
48DE000
|
direct allocation
|
page read and write
|
||
|
3A00000
|
direct allocation
|
page execute and read and write
|
||
|
4869000
|
direct allocation
|
page read and write
|
||
|
9CE000
|
stack
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3E21000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
45A0000
|
direct allocation
|
page read and write
|
||
|
3412000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3B29000
|
direct allocation
|
page execute and read and write
|
||
|
3DAA000
|
heap
|
page read and write
|
||
|
9EE000
|
heap
|
page read and write
|
||
|
3EE1000
|
heap
|
page read and write
|
||
|
2DD5000
|
heap
|
page read and write
|
||
|
1D0000
|
heap
|
page read and write
|
||
|
3DD6000
|
heap
|
page read and write
|
||
|
4869000
|
direct allocation
|
page read and write
|
||
|
359E000
|
stack
|
page read and write
|
||
|
363E000
|
stack
|
page read and write
|
||
|
2E10000
|
heap
|
page read and write
|
There are 164 hidden memdumps, click here to show them.