Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
NEW ORDER.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\Marquand
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\NEW ORDER.exe
|
"C:\Users\user\Desktop\NEW ORDER.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\NEW ORDER.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
2F10000
|
direct allocation
|
page read and write
|
|
|
|
2720000
|
system
|
page execute and read and write
|
|
|
|
47A0000
|
direct allocation
|
page read and write
|
||
|
4600000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3C3F000
|
stack
|
page read and write
|
||
|
490000
|
unkown
|
page write copy
|
||
|
493E000
|
direct allocation
|
page read and write
|
||
|
4723000
|
direct allocation
|
page read and write
|
||
|
3603000
|
heap
|
page read and write
|
||
|
4600000
|
direct allocation
|
page read and write
|
||
|
C20000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2F70000
|
direct allocation
|
page read and write
|
||
|
4600000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
8B4000
|
stack
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
67D000
|
stack
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F70000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
C3A000
|
heap
|
page read and write
|
||
|
3792000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3FF2000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
93E000
|
stack
|
page read and write
|
||
|
3E29000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3E0C000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
2A12000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
33D1000
|
direct allocation
|
page execute and read and write
|
||
|
3FFE000
|
heap
|
page read and write
|
||
|
47A0000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3E4E000
|
heap
|
page read and write
|
||
|
2802000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
493E000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
2F60000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
27C0000
|
direct allocation
|
page read and write
|
||
|
48CD000
|
direct allocation
|
page read and write
|
||
|
2F60000
|
direct allocation
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
C30000
|
heap
|
page read and write
|
||
|
4600000
|
direct allocation
|
page read and write
|
||
|
A45000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
89F000
|
stack
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
2E23000
|
heap
|
page read and write
|
||
|
2F0F000
|
stack
|
page read and write
|
||
|
309E000
|
heap
|
page read and write
|
||
|
C61000
|
heap
|
page read and write
|
||
|
48CD000
|
direct allocation
|
page read and write
|
||
|
2EB4000
|
heap
|
page read and write
|
||
|
48CD000
|
direct allocation
|
page read and write
|
||
|
4600000
|
direct allocation
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
48C9000
|
direct allocation
|
page read and write
|
||
|
47A0000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
100000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
434A000
|
heap
|
page read and write
|
||
|
3EF6000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2A05000
|
heap
|
page read and write
|
||
|
2800000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
48C9000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
47A0000
|
direct allocation
|
page read and write
|
||
|
329E000
|
direct allocation
|
page execute and read and write
|
||
|
3601000
|
heap
|
page read and write
|
||
|
48CD000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
27FE000
|
stack
|
page read and write
|
||
|
2770000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3229000
|
direct allocation
|
page execute and read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
A40000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
48C9000
|
direct allocation
|
page read and write
|
||
|
6F0000
|
heap
|
page read and write
|
||
|
C3E000
|
heap
|
page read and write
|
||
|
3F0F000
|
heap
|
page read and write
|
||
|
47A0000
|
direct allocation
|
page read and write
|
||
|
3C40000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
A30000
|
heap
|
page read and write
|
||
|
27B0000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3442000
|
direct allocation
|
page execute and read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3E22000
|
heap
|
page read and write
|
||
|
2A05000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
48C9000
|
direct allocation
|
page read and write
|
||
|
6BD000
|
stack
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3EA8000
|
heap
|
page read and write
|
||
|
2EB0000
|
heap
|
page read and write
|
||
|
3E5B000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
C6C000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
2A00000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
2F70000
|
direct allocation
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
4723000
|
direct allocation
|
page read and write
|
||
|
8AF000
|
stack
|
page read and write
|
||
|
493E000
|
direct allocation
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
9C5000
|
heap
|
page read and write
|
||
|
493E000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
35FE000
|
stack
|
page read and write
|
||
|
2E0E000
|
stack
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
2DCF000
|
stack
|
page read and write
|
||
|
3E24000
|
heap
|
page read and write
|
||
|
970000
|
heap
|
page read and write
|
||
|
C1E000
|
stack
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
1E0000
|
heap
|
page read and write
|
||
|
3F40000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3029000
|
heap
|
page read and write
|
||
|
3FEE000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
48C9000
|
direct allocation
|
page read and write
|
||
|
4723000
|
direct allocation
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
9C0000
|
heap
|
page read and write
|
||
|
2A17000
|
heap
|
page read and write
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
C5F000
|
heap
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3E7F000
|
heap
|
page read and write
|
||
|
A0E000
|
stack
|
page read and write
|
||
|
4723000
|
direct allocation
|
page read and write
|
||
|
2E40000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3100000
|
direct allocation
|
page execute and read and write
|
||
|
33CD000
|
direct allocation
|
page execute and read and write
|
||
|
C6C000
|
heap
|
page read and write
|
||
|
2F00000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
4723000
|
direct allocation
|
page read and write
|
||
|
2B01000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
27A0000
|
heap
|
page read and write
|
||
|
142F000
|
stack
|
page read and write
|
||
|
493E000
|
direct allocation
|
page read and write
|
||
|
48CD000
|
direct allocation
|
page read and write
|
||
|
3D40000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3FEE000
|
heap
|
page execute and read and write
|
||
|
4600000
|
direct allocation
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3E17000
|
heap
|
page read and write
|
||
|
3E74000
|
heap
|
page read and write
|
||
|
4723000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
182F000
|
stack
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
2F70000
|
direct allocation
|
page read and write
|
||
|
47A0000
|
direct allocation
|
page read and write
|
||
|
3773000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
493E000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
2D00000
|
heap
|
page read and write
|
||
|
48CD000
|
direct allocation
|
page read and write
|
||
|
493E000
|
direct allocation
|
page read and write
|
||
|
4600000
|
direct allocation
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
47A0000
|
direct allocation
|
page read and write
|
||
|
3E1A000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
48C9000
|
direct allocation
|
page read and write
|
||
|
2F70000
|
direct allocation
|
page read and write
|
||
|
48CD000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
2A17000
|
heap
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
446A000
|
heap
|
page read and write
|
||
|
940000
|
heap
|
page read and write
|
||
|
322D000
|
direct allocation
|
page execute and read and write
|
||
|
48C9000
|
direct allocation
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
4723000
|
direct allocation
|
page read and write
|
||
|
2813000
|
heap
|
page read and write
|
||
|
8FE000
|
stack
|
page read and write
|
||
|
302D000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
There are 240 hidden memdumps, click here to show them.