Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
DRAFT.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\incalculable
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\DRAFT.exe
|
"C:\Users\user\Desktop\DRAFT.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\DRAFT.exe"
|
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
15.164.165.52.in-addr.arpa
|
unknown
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3A80000
|
direct allocation
|
page read and write
|
|
|
|
400000
|
system
|
page execute and read and write
|
|
|
|
4271000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3D36000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3BE8000
|
heap
|
page read and write
|
||
|
3600000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3A7F000
|
stack
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3400000
|
heap
|
page read and write
|
||
|
3D3D000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3D3B000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
427A000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3BEA000
|
heap
|
page read and write
|
||
|
3C80000
|
heap
|
page read and write
|
||
|
3BE9000
|
heap
|
page read and write
|
||
|
3D27000
|
heap
|
page read and write
|
||
|
3D9E000
|
direct allocation
|
page execute and read and write
|
||
|
3C8F000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3D2D000
|
heap
|
page read and write
|
||
|
3BED000
|
heap
|
page read and write
|
||
|
3C9C000
|
heap
|
page read and write
|
||
|
397E000
|
stack
|
page read and write
|
||
|
383E000
|
stack
|
page read and write
|
||
|
3AE0000
|
direct allocation
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3C85000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
4B9000
|
unkown
|
page write copy
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3BEA000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3BE6000
|
heap
|
page read and write
|
||
|
3605000
|
heap
|
page read and write
|
||
|
3A00000
|
heap
|
page read and write
|
||
|
3AE0000
|
direct allocation
|
page read and write
|
||
|
3C91000
|
heap
|
page read and write
|
||
|
3BE9000
|
heap
|
page read and write
|
||
|
3BEB000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3BE5000
|
heap
|
page read and write
|
||
|
3ECD000
|
direct allocation
|
page execute and read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3BEB000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3BE4000
|
heap
|
page read and write
|
||
|
3D37000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3BE5000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3C9A000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3C8A000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3BEC000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3310000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3B2D000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3C8F000
|
heap
|
page read and write
|
||
|
3AE0000
|
direct allocation
|
page read and write
|
||
|
4270000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3BE6000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3D2E000
|
heap
|
page read and write
|
||
|
3BE1000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3BED000
|
heap
|
page read and write
|
||
|
3C87000
|
heap
|
page read and write
|
||
|
3C9C000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3C83000
|
heap
|
page read and write
|
||
|
3C9D000
|
heap
|
page read and write
|
||
|
3BE2000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3402000
|
heap
|
page read and write
|
||
|
3C8F000
|
heap
|
page read and write
|
||
|
3B9E000
|
heap
|
page read and write
|
||
|
3D38000
|
heap
|
page read and write
|
||
|
3C80000
|
heap
|
page read and write
|
||
|
3BE7000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3C92000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3C96000
|
heap
|
page read and write
|
||
|
3612000
|
heap
|
page read and write
|
||
|
3C88000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3ED1000
|
direct allocation
|
page execute and read and write
|
||
|
3BEA000
|
heap
|
page read and write
|
||
|
3C8F000
|
heap
|
page read and write
|
||
|
3BEE000
|
heap
|
page read and write
|
||
|
32C0000
|
heap
|
page read and write
|
||
|
3C9D000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3C90000
|
heap
|
page read and write
|
||
|
3BE0000
|
heap
|
page read and write
|
||
|
3C80000
|
heap
|
page read and write
|
||
|
3BE0000
|
heap
|
page read and write
|
||
|
3D29000
|
direct allocation
|
page execute and read and write
|
||
|
3AD0000
|
direct allocation
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3C92000
|
heap
|
page read and write
|
||
|
325D000
|
stack
|
page read and write
|
||
|
3BE9000
|
heap
|
page read and write
|
||
|
3AD0000
|
direct allocation
|
page read and write
|
||
|
3BE0000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3C95000
|
heap
|
page read and write
|
||
|
2EE8000
|
heap
|
page read and write
|
||
|
3BEF000
|
heap
|
page read and write
|
||
|
3BED000
|
heap
|
page read and write
|
||
|
3BE1000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3605000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3C91000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3C90000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
4001000
|
heap
|
page read and write
|
||
|
3BE5000
|
heap
|
page read and write
|
||
|
426A000
|
heap
|
page read and write
|
||
|
3BE3000
|
heap
|
page read and write
|
||
|
3C9F000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3C95000
|
heap
|
page read and write
|
||
|
3617000
|
heap
|
page read and write
|
||
|
329C000
|
stack
|
page read and write
|
||
|
3BE1000
|
heap
|
page read and write
|
||
|
3B29000
|
heap
|
page read and write
|
||
|
3C96000
|
heap
|
page read and write
|
||
|
3BE6000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3BE2000
|
heap
|
page read and write
|
||
|
426A000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3C8D000
|
heap
|
page read and write
|
||
|
3C82000
|
heap
|
page read and write
|
||
|
3D39000
|
heap
|
page read and write
|
||
|
393F000
|
stack
|
page read and write
|
||
|
3D2D000
|
direct allocation
|
page execute and read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3D3D000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3C9D000
|
heap
|
page read and write
|
||
|
3617000
|
heap
|
page read and write
|
||
|
3800000
|
direct allocation
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3BEB000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3C00000
|
direct allocation
|
page execute and read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3BED000
|
heap
|
page read and write
|
||
|
3F42000
|
direct allocation
|
page execute and read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3C96000
|
heap
|
page read and write
|
||
|
3BE5000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3BE2000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3BE4000
|
heap
|
page read and write
|
||
|
3BE4000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3C8B000
|
heap
|
page read and write
|
||
|
3800000
|
heap
|
page read and write
|
||
|
3BE7000
|
heap
|
page read and write
|
||
|
3C91000
|
heap
|
page read and write
|
||
|
3C99000
|
heap
|
page read and write
|
||
|
3701000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3BE9000
|
heap
|
page read and write
|
||
|
3923000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3C9B000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3D3B000
|
heap
|
page read and write
|
||
|
3C83000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3BE4000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
477000
|
unkown
|
page execute and write copy
|
||
|
3D36000
|
heap
|
page read and write
|
||
|
3BE2000
|
heap
|
page read and write
|
||
|
3AE0000
|
direct allocation
|
page read and write
|
||
|
2FD3000
|
heap
|
page read and write
|
||
|
3BE6000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
3C99000
|
heap
|
page read and write
|
||
|
3C9C000
|
heap
|
page read and write
|
||
|
426A000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
32E0000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3BE6000
|
heap
|
page read and write
|
||
|
3BEA000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
33F0000
|
heap
|
page read and write
|
||
|
3BE7000
|
heap
|
page read and write
|
||
|
3C88000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3C98000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
||
|
3413000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3C90000
|
heap
|
page read and write
|
||
|
4271000
|
heap
|
page read and write
|
||
|
3D27000
|
heap
|
page read and write
|
||
|
3C8E000
|
heap
|
page read and write
|
||
|
42EF000
|
heap
|
page read and write
|
There are 257 hidden memdumps, click here to show them.