Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
eArchive_InvoiceNOS20240004228.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\aut3575.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\aut35A5.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\finitism
|
ASCII text, with very long lines (57348), with no line terminators
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\piceworth
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\eArchive_InvoiceNOS20240004228.exe
|
"C:\Users\user\Desktop\eArchive_InvoiceNOS20240004228.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\eArchive_InvoiceNOS20240004228.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
A80000
|
direct allocation
|
page read and write
|
|
|
|
400000
|
system
|
page execute and read and write
|
|
|
|
131A000
|
heap
|
page read and write
|
||
|
12AD000
|
heap
|
page read and write
|
||
|
1352000
|
heap
|
page read and write
|
||
|
3900000
|
direct allocation
|
page read and write
|
||
|
3A9E000
|
direct allocation
|
page read and write
|
||
|
31FF000
|
stack
|
page read and write
|
||
|
36D1000
|
direct allocation
|
page execute and read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
3FE000
|
stack
|
page read and write
|
||
|
110E000
|
heap
|
page read and write
|
||
|
103E000
|
heap
|
page read and write
|
||
|
12EF000
|
heap
|
page read and write
|
||
|
FF6000
|
heap
|
page read and write
|
||
|
3A9E000
|
direct allocation
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
FAC000
|
heap
|
page read and write
|
||
|
36CF000
|
heap
|
page read and write
|
||
|
8C0000
|
heap
|
page read and write
|
||
|
36A3000
|
heap
|
page read and write
|
||
|
3661000
|
heap
|
page read and write
|
||
|
A74000
|
unkown
|
page readonly
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
101D000
|
heap
|
page read and write
|
||
|
36AD000
|
heap
|
page read and write
|
||
|
3670000
|
heap
|
page read and write
|
||
|
12CF000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
3900000
|
direct allocation
|
page read and write
|
||
|
1309000
|
heap
|
page read and write
|
||
|
3742000
|
direct allocation
|
page execute and read and write
|
||
|
1356000
|
heap
|
page read and write
|
||
|
3671000
|
heap
|
page read and write
|
||
|
FF6000
|
heap
|
page read and write
|
||
|
800000
|
heap
|
page read and write
|
||
|
2E05000
|
heap
|
page read and write
|
||
|
1051000
|
heap
|
page read and write
|
||
|
3682000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
3760000
|
direct allocation
|
page read and write
|
||
|
1355000
|
heap
|
page read and write
|
||
|
1333000
|
heap
|
page read and write
|
||
|
3900000
|
direct allocation
|
page read and write
|
||
|
36FA000
|
heap
|
page read and write
|
||
|
12CF000
|
heap
|
page read and write
|
||
|
2B20000
|
direct allocation
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
34A000
|
stack
|
page read and write
|
||
|
359E000
|
direct allocation
|
page execute and read and write
|
||
|
3A2D000
|
direct allocation
|
page read and write
|
||
|
12EF000
|
heap
|
page read and write
|
||
|
1B6E000
|
stack
|
page read and write
|
||
|
1363000
|
heap
|
page read and write
|
||
|
A62000
|
unkown
|
page readonly
|
||
|
3400000
|
direct allocation
|
page execute and read and write
|
||
|
126A000
|
heap
|
page read and write
|
||
|
3A29000
|
direct allocation
|
page read and write
|
||
|
36E2000
|
heap
|
page read and write
|
||
|
3A9E000
|
direct allocation
|
page read and write
|
||
|
A7E000
|
stack
|
page read and write
|
||
|
3900000
|
direct allocation
|
page read and write
|
||
|
36FB000
|
heap
|
page read and write
|
||
|
1279000
|
heap
|
page read and write
|
||
|
1323000
|
heap
|
page read and write
|
||
|
70E000
|
stack
|
page read and write
|
||
|
3660000
|
heap
|
page read and write
|
||
|
3A2D000
|
direct allocation
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
1074000
|
heap
|
page read and write
|
||
|
2E17000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
910000
|
heap
|
page read and write
|
||
|
1352000
|
heap
|
page read and write
|
||
|
750000
|
heap
|
page read and write
|
||
|
EEF000
|
stack
|
page read and write
|
||
|
A00000
|
direct allocation
|
page read and write
|
||
|
1010000
|
heap
|
page read and write
|
||
|
3883000
|
direct allocation
|
page read and write
|
||
|
36E2000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
FB1000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
36CD000
|
direct allocation
|
page execute and read and write
|
||
|
10D6000
|
heap
|
page read and write
|
||
|
3883000
|
direct allocation
|
page read and write
|
||
|
2B20000
|
direct allocation
|
page read and write
|
||
|
FEA000
|
heap
|
page read and write
|
||
|
1093000
|
heap
|
page read and write
|
||
|
339E000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
1363000
|
heap
|
page read and write
|
||
|
1334000
|
heap
|
page read and write
|
||
|
1323000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
128C000
|
heap
|
page read and write
|
||
|
FB1000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
FA4000
|
heap
|
page read and write
|
||
|
3A29000
|
direct allocation
|
page read and write
|
||
|
101D000
|
heap
|
page read and write
|
||
|
AD0000
|
direct allocation
|
page read and write
|
||
|
A70000
|
unkown
|
page write copy
|
||
|
3760000
|
direct allocation
|
page read and write
|
||
|
EAE000
|
stack
|
page read and write
|
||
|
352D000
|
direct allocation
|
page execute and read and write
|
||
|
3760000
|
direct allocation
|
page read and write
|
||
|
30FF000
|
stack
|
page read and write
|
||
|
1000000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
1309000
|
heap
|
page read and write
|
||
|
1283000
|
heap
|
page read and write
|
||
|
3A29000
|
direct allocation
|
page read and write
|
||
|
12F8000
|
heap
|
page read and write
|
||
|
9A0000
|
unkown
|
page readonly
|
||
|
9F0000
|
heap
|
page read and write
|
||
|
11CF000
|
heap
|
page read and write
|
||
|
FA3000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
12C5000
|
heap
|
page read and write
|
||
|
101F000
|
heap
|
page read and write
|
||
|
ECB000
|
stack
|
page read and write
|
||
|
105F000
|
heap
|
page read and write
|
||
|
3329000
|
heap
|
page read and write
|
||
|
11FC000
|
heap
|
page read and write
|
||
|
3220000
|
heap
|
page read and write
|
||
|
1283000
|
heap
|
page read and write
|
||
|
A6C000
|
unkown
|
page read and write
|
||
|
36D8000
|
heap
|
page read and write
|
||
|
3201000
|
heap
|
page read and write
|
||
|
1352000
|
heap
|
page read and write
|
||
|
369C000
|
heap
|
page read and write
|
||
|
3760000
|
direct allocation
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
36E2000
|
heap
|
page read and write
|
||
|
370E000
|
heap
|
page read and write
|
||
|
1363000
|
heap
|
page read and write
|
||
|
1364000
|
heap
|
page read and write
|
||
|
1363000
|
heap
|
page read and write
|
||
|
3682000
|
heap
|
page read and write
|
||
|
105F000
|
heap
|
page read and write
|
||
|
3A29000
|
direct allocation
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
F00000
|
heap
|
page read and write
|
||
|
F20000
|
direct allocation
|
page execute and read and write
|
||
|
1333000
|
heap
|
page read and write
|
||
|
2E00000
|
heap
|
page read and write
|
||
|
EBE000
|
stack
|
page read and write
|
||
|
3900000
|
direct allocation
|
page read and write
|
||
|
105F000
|
heap
|
page read and write
|
||
|
1363000
|
heap
|
page read and write
|
||
|
3704000
|
heap
|
page read and write
|
||
|
2B20000
|
direct allocation
|
page read and write
|
||
|
3883000
|
direct allocation
|
page read and write
|
||
|
36B4000
|
heap
|
page read and write
|
||
|
125C000
|
heap
|
page read and write
|
||
|
1000000
|
heap
|
page read and write
|
||
|
1060000
|
heap
|
page read and write
|
||
|
FE8000
|
heap
|
page read and write
|
||
|
3529000
|
direct allocation
|
page execute and read and write
|
||
|
3123000
|
heap
|
page read and write
|
||
|
3900000
|
direct allocation
|
page read and write
|
||
|
101D000
|
heap
|
page read and write
|
||
|
1323000
|
heap
|
page read and write
|
||
|
12B4000
|
heap
|
page read and write
|
||
|
1363000
|
heap
|
page read and write
|
||
|
12AE000
|
heap
|
page read and write
|
||
|
1309000
|
heap
|
page read and write
|
||
|
2E05000
|
heap
|
page read and write
|
||
|
3A29000
|
direct allocation
|
page read and write
|
||
|
105F000
|
heap
|
page read and write
|
||
|
3000000
|
heap
|
page read and write
|
||
|
3760000
|
direct allocation
|
page read and write
|
||
|
3883000
|
direct allocation
|
page read and write
|
||
|
123E000
|
heap
|
page read and write
|
||
|
F78000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
3A2D000
|
direct allocation
|
page read and write
|
||
|
3670000
|
heap
|
page read and write
|
||
|
332D000
|
heap
|
page read and write
|
||
|
2C00000
|
heap
|
page read and write
|
||
|
1310000
|
heap
|
page read and write
|
||
|
36D8000
|
heap
|
page read and write
|
||
|
12D8000
|
heap
|
page read and write
|
||
|
3A29000
|
direct allocation
|
page read and write
|
||
|
3180000
|
direct allocation
|
page read and write
|
||
|
3B0000
|
heap
|
page read and write
|
||
|
101D000
|
heap
|
page read and write
|
||
|
3A9E000
|
direct allocation
|
page read and write
|
||
|
126B000
|
heap
|
page read and write
|
||
|
101F000
|
heap
|
page read and write
|
||
|
1049000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
3883000
|
direct allocation
|
page read and write
|
||
|
A74000
|
unkown
|
page readonly
|
||
|
8E0000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
12A3000
|
heap
|
page read and write
|
||
|
101F000
|
heap
|
page read and write
|
||
|
AD0000
|
direct allocation
|
page read and write
|
||
|
89C000
|
stack
|
page read and write
|
||
|
710000
|
heap
|
page read and write
|
||
|
118F000
|
heap
|
page read and write
|
||
|
12EF000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
101D000
|
heap
|
page read and write
|
||
|
2E12000
|
heap
|
page read and write
|
||
|
129B000
|
heap
|
page read and write
|
||
|
FD1000
|
heap
|
page read and write
|
||
|
127A000
|
heap
|
page read and write
|
||
|
A3C000
|
unkown
|
page readonly
|
||
|
9A1000
|
unkown
|
page execute read
|
||
|
2B20000
|
direct allocation
|
page read and write
|
||
|
3A2D000
|
direct allocation
|
page read and write
|
||
|
9A1000
|
unkown
|
page execute read
|
||
|
EDF000
|
stack
|
page read and write
|
||
|
A6C000
|
unkown
|
page write copy
|
||
|
103A000
|
heap
|
page read and write
|
||
|
1009000
|
heap
|
page read and write
|
||
|
85D000
|
stack
|
page read and write
|
||
|
101D000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
12CF000
|
heap
|
page read and write
|
||
|
12B4000
|
heap
|
page read and write
|
||
|
3A2D000
|
direct allocation
|
page read and write
|
||
|
2C02000
|
heap
|
page read and write
|
||
|
36C5000
|
heap
|
page read and write
|
||
|
36BE000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
1000000
|
heap
|
page read and write
|
||
|
A3E000
|
stack
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
2F01000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
3669000
|
heap
|
page read and write
|
||
|
F70000
|
heap
|
page read and write
|
||
|
A62000
|
unkown
|
page readonly
|
||
|
370E000
|
heap
|
page read and write
|
||
|
105F000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
3A9E000
|
direct allocation
|
page read and write
|
||
|
3A9E000
|
direct allocation
|
page read and write
|
||
|
2E17000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
3883000
|
direct allocation
|
page read and write
|
||
|
A3C000
|
unkown
|
page readonly
|
||
|
3A2D000
|
direct allocation
|
page read and write
|
||
|
101D000
|
heap
|
page read and write
|
||
|
176E000
|
stack
|
page read and write
|
||
|
368B000
|
heap
|
page read and write
|
||
|
3718000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
||
|
3224000
|
heap
|
page read and write
|
||
|
3760000
|
direct allocation
|
page read and write
|
||
|
9A0000
|
unkown
|
page readonly
|
||
|
12BE000
|
heap
|
page read and write
|
||
|
2C13000
|
heap
|
page read and write
|
There are 247 hidden memdumps, click here to show them.