Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
z1PURCHASEORDER.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\aut2D22.tmp
|
data
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\nonplacental
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\z1PURCHASEORDER.exe
|
"C:\Users\user\Desktop\z1PURCHASEORDER.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\z1PURCHASEORDER.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
3C50000
|
direct allocation
|
page read and write
|
|
|
|
400000
|
system
|
page execute and read and write
|
|
|
|
3829000
|
heap
|
page read and write
|
||
|
38B0000
|
direct allocation
|
page read and write
|
||
|
2F40000
|
heap
|
page read and write
|
||
|
389E000
|
heap
|
page read and write
|
||
|
17FF000
|
stack
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
2F60000
|
direct allocation
|
page read and write
|
||
|
3000000
|
heap
|
page read and write
|
||
|
128F000
|
heap
|
page read and write
|
||
|
39D3000
|
direct allocation
|
page read and write
|
||
|
1381000
|
heap
|
page read and write
|
||
|
3A50000
|
direct allocation
|
page read and write
|
||
|
78E000
|
unkown
|
page read and write
|
||
|
2E7D000
|
stack
|
page read and write
|
||
|
3A2D000
|
direct allocation
|
page execute and read and write
|
||
|
123D000
|
heap
|
page read and write
|
||
|
3B7D000
|
direct allocation
|
page read and write
|
||
|
1379000
|
heap
|
page read and write
|
||
|
3601000
|
heap
|
page read and write
|
||
|
3B7D000
|
direct allocation
|
page read and write
|
||
|
103F000
|
heap
|
page read and write
|
||
|
78E000
|
unkown
|
page write copy
|
||
|
2EF0000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
12C6000
|
heap
|
page read and write
|
||
|
1BFE000
|
stack
|
page read and write
|
||
|
12F7000
|
heap
|
page read and write
|
||
|
1235000
|
heap
|
page read and write
|
||
|
10AA000
|
heap
|
page read and write
|
||
|
35CF000
|
stack
|
page read and write
|
||
|
784000
|
unkown
|
page readonly
|
||
|
1361000
|
heap
|
page read and write
|
||
|
12F7000
|
heap
|
page read and write
|
||
|
1361000
|
heap
|
page read and write
|
||
|
75F000
|
unkown
|
page readonly
|
||
|
2FDE000
|
stack
|
page read and write
|
||
|
3560000
|
heap
|
page read and write
|
||
|
5FA000
|
stack
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3BEE000
|
direct allocation
|
page read and write
|
||
|
39D3000
|
direct allocation
|
page read and write
|
||
|
12A1000
|
heap
|
page read and write
|
||
|
1198000
|
heap
|
page read and write
|
||
|
3BEE000
|
direct allocation
|
page read and write
|
||
|
103C000
|
heap
|
page read and write
|
||
|
3B79000
|
direct allocation
|
page read and write
|
||
|
1033000
|
heap
|
page read and write
|
||
|
12DD000
|
heap
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3B79000
|
direct allocation
|
page read and write
|
||
|
3564000
|
heap
|
page read and write
|
||
|
3BD1000
|
direct allocation
|
page execute and read and write
|
||
|
128F000
|
heap
|
page read and write
|
||
|
12D4000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3A50000
|
direct allocation
|
page read and write
|
||
|
127B000
|
heap
|
page read and write
|
||
|
3B7D000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
DCE000
|
stack
|
page read and write
|
||
|
3A29000
|
direct allocation
|
page execute and read and write
|
||
|
1259000
|
heap
|
page read and write
|
||
|
11C4000
|
heap
|
page read and write
|
||
|
12F7000
|
heap
|
page read and write
|
||
|
104E000
|
heap
|
page read and write
|
||
|
DBE000
|
stack
|
page read and write
|
||
|
138D000
|
heap
|
page read and write
|
||
|
3BEE000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3CA0000
|
direct allocation
|
page read and write
|
||
|
11FC000
|
heap
|
page read and write
|
||
|
124F000
|
heap
|
page read and write
|
||
|
1372000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
1311000
|
heap
|
page read and write
|
||
|
12D3000
|
heap
|
page read and write
|
||
|
1C10000
|
direct allocation
|
page read and write
|
||
|
107E000
|
heap
|
page read and write
|
||
|
F0E000
|
stack
|
page read and write
|
||
|
3BEE000
|
direct allocation
|
page read and write
|
||
|
6D0000
|
unkown
|
page readonly
|
||
|
6D1000
|
unkown
|
page execute read
|
||
|
3013000
|
heap
|
page read and write
|
||
|
12E6000
|
heap
|
page read and write
|
||
|
3B7D000
|
direct allocation
|
page read and write
|
||
|
133B000
|
heap
|
page read and write
|
||
|
113A000
|
heap
|
page read and write
|
||
|
3BEE000
|
direct allocation
|
page read and write
|
||
|
1318000
|
heap
|
page read and write
|
||
|
134E000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3A50000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
127B000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
12D3000
|
heap
|
page read and write
|
||
|
3700000
|
heap
|
page read and write
|
||
|
6D1000
|
unkown
|
page execute read
|
||
|
1286000
|
heap
|
page read and write
|
||
|
132C000
|
heap
|
page read and write
|
||
|
1269000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3A50000
|
direct allocation
|
page read and write
|
||
|
797000
|
unkown
|
page readonly
|
||
|
3BEE000
|
direct allocation
|
page read and write
|
||
|
797000
|
unkown
|
page readonly
|
||
|
12DD000
|
heap
|
page read and write
|
||
|
108A000
|
heap
|
page read and write
|
||
|
1246000
|
heap
|
page read and write
|
||
|
106B000
|
heap
|
page read and write
|
||
|
3217000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
38B0000
|
direct allocation
|
page read and write
|
||
|
660000
|
heap
|
page read and write
|
||
|
75F000
|
unkown
|
page readonly
|
||
|
F30000
|
heap
|
page read and write
|
||
|
1224000
|
heap
|
page read and write
|
||
|
12D3000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
1357000
|
heap
|
page read and write
|
||
|
121D000
|
heap
|
page read and write
|
||
|
2F9E000
|
stack
|
page read and write
|
||
|
39D3000
|
direct allocation
|
page read and write
|
||
|
3B7D000
|
direct allocation
|
page read and write
|
||
|
6B0000
|
heap
|
page read and write
|
||
|
1033000
|
heap
|
page read and write
|
||
|
3205000
|
heap
|
page read and write
|
||
|
3B79000
|
direct allocation
|
page read and write
|
||
|
3B7D000
|
direct allocation
|
page read and write
|
||
|
1311000
|
heap
|
page read and write
|
||
|
1269000
|
heap
|
page read and write
|
||
|
39D3000
|
direct allocation
|
page read and write
|
||
|
39D3000
|
direct allocation
|
page read and write
|
||
|
11CF000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
11E1000
|
heap
|
page read and write
|
||
|
1381000
|
heap
|
page read and write
|
||
|
1259000
|
heap
|
page read and write
|
||
|
127B000
|
heap
|
page read and write
|
||
|
11E4000
|
heap
|
page read and write
|
||
|
1361000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
2F10000
|
heap
|
page read and write
|
||
|
3CA0000
|
direct allocation
|
page read and write
|
||
|
3B79000
|
direct allocation
|
page read and write
|
||
|
11C3000
|
heap
|
page read and write
|
||
|
39D3000
|
direct allocation
|
page read and write
|
||
|
3B79000
|
direct allocation
|
page read and write
|
||
|
1024000
|
heap
|
page read and write
|
||
|
104E000
|
heap
|
page read and write
|
||
|
3900000
|
direct allocation
|
page execute and read and write
|
||
|
107E000
|
heap
|
page read and write
|
||
|
3002000
|
heap
|
page read and write
|
||
|
124F000
|
heap
|
page read and write
|
||
|
1262000
|
heap
|
page read and write
|
||
|
1034000
|
heap
|
page read and write
|
||
|
3217000
|
heap
|
page read and write
|
||
|
38B0000
|
direct allocation
|
page read and write
|
||
|
3500000
|
heap
|
page read and write
|
||
|
1345000
|
heap
|
page read and write
|
||
|
1213000
|
heap
|
page read and write
|
||
|
DFC000
|
stack
|
page read and write
|
||
|
1230000
|
heap
|
page read and write
|
||
|
1357000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
11AD000
|
heap
|
page read and write
|
||
|
12FE000
|
heap
|
page read and write
|
||
|
792000
|
unkown
|
page write copy
|
||
|
3C42000
|
direct allocation
|
page execute and read and write
|
||
|
3A9E000
|
direct allocation
|
page execute and read and write
|
||
|
10BE000
|
heap
|
page read and write
|
||
|
12D3000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
784000
|
unkown
|
page readonly
|
||
|
12A1000
|
heap
|
page read and write
|
||
|
6D0000
|
unkown
|
page readonly
|
||
|
2EBD000
|
stack
|
page read and write
|
||
|
10BD000
|
heap
|
page read and write
|
||
|
3A50000
|
direct allocation
|
page read and write
|
||
|
12AA000
|
heap
|
page read and write
|
||
|
3623000
|
heap
|
page read and write
|
||
|
3CA0000
|
direct allocation
|
page read and write
|
||
|
103F000
|
heap
|
page read and write
|
||
|
DDB000
|
stack
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
1285000
|
heap
|
page read and write
|
||
|
1CC0000
|
heap
|
page read and write
|
||
|
2F50000
|
heap
|
page read and write
|
||
|
38B0000
|
direct allocation
|
page read and write
|
||
|
10DD000
|
heap
|
page read and write
|
||
|
11F3000
|
heap
|
page read and write
|
||
|
1321000
|
heap
|
page read and write
|
||
|
1357000
|
heap
|
page read and write
|
||
|
3CA0000
|
direct allocation
|
page read and write
|
||
|
6AE000
|
stack
|
page read and write
|
||
|
382D000
|
heap
|
page read and write
|
||
|
132B000
|
heap
|
page read and write
|
||
|
1332000
|
heap
|
page read and write
|
||
|
12C4000
|
heap
|
page read and write
|
||
|
1097000
|
heap
|
page read and write
|
||
|
12DD000
|
heap
|
page read and write
|
||
|
3B79000
|
direct allocation
|
page read and write
|
||
|
3BCD000
|
direct allocation
|
page execute and read and write
|
||
|
1186000
|
heap
|
page read and write
|
||
|
1345000
|
heap
|
page read and write
|
||
|
3A50000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
1308000
|
heap
|
page read and write
|
||
|
3205000
|
heap
|
page read and write
|
||
|
38FF000
|
stack
|
page read and write
|
||
|
1008000
|
heap
|
page read and write
|
||
|
3301000
|
heap
|
page read and write
|
||
|
1389000
|
heap
|
page execute and read and write
|
||
|
124F000
|
heap
|
page read and write
|
||
|
3212000
|
heap
|
page read and write
|
||
|
12D3000
|
heap
|
page read and write
|
||
|
38B0000
|
direct allocation
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
12C4000
|
heap
|
page read and write
|
||
|
12A1000
|
heap
|
page read and write
|
||
|
1000000
|
heap
|
page read and write
|
||
|
FF0000
|
heap
|
page read and write
|
||
|
3CA0000
|
direct allocation
|
page read and write
|
||
|
38B0000
|
direct allocation
|
page read and write
|
||
|
105D000
|
heap
|
page read and write
|
||
|
138A000
|
heap
|
page read and write
|
||
|
1083000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3013000
|
heap
|
page read and write
|
||
|
3CA0000
|
direct allocation
|
page read and write
|
||
|
117C000
|
heap
|
page read and write
|
There are 228 hidden memdumps, click here to show them.