Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
hesaphareketi-01.pdf.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\woolpress
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\hesaphareketi-01.pdf.exe
|
"C:\Users\user\Desktop\hesaphareketi-01.pdf.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\hesaphareketi-01.pdf.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
400000
|
system
|
page execute and read and write
|
|
|
|
3740000
|
direct allocation
|
page read and write
|
|
|
|
3FE5000
|
heap
|
page read and write
|
||
|
399A000
|
heap
|
page read and write
|
||
|
4407000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
180000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
A4E000
|
stack
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3405000
|
heap
|
page read and write
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
3B41000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3E5D000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
AA8000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
190000
|
heap
|
page read and write
|
||
|
398F000
|
stack
|
page read and write
|
||
|
9F0000
|
heap
|
page read and write
|
||
|
3800000
|
heap
|
page read and write
|
||
|
3B9E000
|
direct allocation
|
page execute and read and write
|
||
|
3DFC000
|
heap
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
3B29000
|
direct allocation
|
page execute and read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3202000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3F4D000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3B2D000
|
direct allocation
|
page execute and read and write
|
||
|
3E50000
|
direct allocation
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
42FC000
|
heap
|
page read and write
|
||
|
3DBB000
|
heap
|
page read and write
|
||
|
3E9B000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3EEA000
|
heap
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
8AF000
|
stack
|
page read and write
|
||
|
3CCD000
|
direct allocation
|
page execute and read and write
|
||
|
3BF0000
|
heap
|
page read and write
|
||
|
363E000
|
stack
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3E50000
|
direct allocation
|
page read and write
|
||
|
160000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
E5D000
|
stack
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
A7E000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
AA6000
|
heap
|
page read and write
|
||
|
3600000
|
direct allocation
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
373F000
|
stack
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
3405000
|
heap
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3EEA000
|
heap
|
page read and write
|
||
|
3CF0000
|
heap
|
page read and write
|
||
|
402C000
|
heap
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3E50000
|
direct allocation
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
490000
|
unkown
|
page write copy
|
||
|
3E4F000
|
stack
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3929000
|
heap
|
page read and write
|
||
|
3DE4000
|
heap
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
8B4000
|
stack
|
page read and write
|
||
|
354E000
|
stack
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3F13000
|
heap
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
100000
|
heap
|
page read and write
|
||
|
2EF0000
|
heap
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
A7A000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
A04000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3A00000
|
direct allocation
|
page execute and read and write
|
||
|
3F94000
|
heap
|
page read and write
|
||
|
3600000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
1DE000
|
stack
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3723000
|
heap
|
page read and write
|
||
|
3B0F000
|
heap
|
page read and write
|
||
|
399E000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
AA3000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
3EEE000
|
heap
|
page read and write
|
||
|
3F9E000
|
heap
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
AA0000
|
heap
|
page read and write
|
||
|
89F000
|
stack
|
page read and write
|
||
|
A00000
|
heap
|
page read and write
|
||
|
2EA0000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
110000
|
heap
|
page read and write
|
||
|
3E23000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
4580000
|
direct allocation
|
page read and write
|
||
|
126F000
|
stack
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3EAA000
|
heap
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3B00000
|
direct allocation
|
page read and write
|
||
|
3CD1000
|
direct allocation
|
page execute and read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3412000
|
heap
|
page read and write
|
||
|
9C5000
|
heap
|
page read and write
|
||
|
3501000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3801000
|
heap
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3417000
|
heap
|
page read and write
|
||
|
3E52000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page execute and read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
482000
|
unkown
|
page readonly
|
||
|
AAF000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
E1D000
|
stack
|
page read and write
|
||
|
3F25000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3400000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
2EC0000
|
heap
|
page read and write
|
||
|
3F34000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
2FD0000
|
heap
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
37CE000
|
stack
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3EE2000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3E17000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
46A3000
|
direct allocation
|
page read and write
|
||
|
15E000
|
stack
|
page read and write
|
||
|
358E000
|
stack
|
page read and write
|
||
|
3E50000
|
direct allocation
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3417000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
AA8000
|
heap
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
3E50000
|
direct allocation
|
page read and write
|
||
|
3D42000
|
direct allocation
|
page execute and read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3EF0000
|
heap
|
page read and write
|
||
|
A70000
|
heap
|
page read and write
|
||
|
392D000
|
heap
|
page read and write
|
||
|
3ECE000
|
heap
|
page read and write
|
||
|
3F4D000
|
heap
|
page read and write
|
||
|
166E000
|
stack
|
page read and write
|
||
|
4720000
|
direct allocation
|
page read and write
|
||
|
48BE000
|
direct allocation
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
AA6000
|
heap
|
page read and write
|
||
|
3E50000
|
direct allocation
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
||
|
484D000
|
direct allocation
|
page read and write
|
||
|
3F9F000
|
heap
|
page read and write
|
||
|
4849000
|
direct allocation
|
page read and write
|
||
|
3FE5000
|
heap
|
page read and write
|
There are 239 hidden memdumps, click here to show them.