Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
RQ#0000081024.exe
|
PE32 executable (GUI) Intel 80386, for MS Windows
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Temp\outvaunts
|
data
|
dropped
|
Processes
|
Path
|
Cmdline
|
Malicious
|
|
|---|---|---|---|
|
C:\Users\user\Desktop\RQ#0000081024.exe
|
"C:\Users\user\Desktop\RQ#0000081024.exe"
|
|
|
|
C:\Windows\SysWOW64\svchost.exe
|
"C:\Users\user\Desktop\RQ#0000081024.exe"
|
|
Memdumps
|
Base Address
|
Regiontype
|
Protect
|
Malicious
|
|
|---|---|---|---|---|
|
400000
|
system
|
page execute and read and write
|
|
|
|
3740000
|
direct allocation
|
page read and write
|
|
|
|
3F41000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
89F000
|
stack
|
page read and write
|
||
|
399E000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
30A0000
|
heap
|
page read and write
|
||
|
3B29000
|
direct allocation
|
page execute and read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
4349000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
2FD0000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
A72000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3C3F000
|
stack
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
3CCD000
|
direct allocation
|
page execute and read and write
|
||
|
3501000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3A00000
|
direct allocation
|
page execute and read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
3F06000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
A40000
|
heap
|
page read and write
|
||
|
123F000
|
stack
|
page read and write
|
||
|
3B2D000
|
direct allocation
|
page execute and read and write
|
||
|
3E99000
|
heap
|
page read and write
|
||
|
3F16000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
A4A000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
A2E000
|
stack
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
36FF000
|
stack
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
3070000
|
heap
|
page read and write
|
||
|
163F000
|
stack
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
A4E000
|
heap
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3F40000
|
heap
|
page read and write
|
||
|
1770000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
2FDB000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3FA3000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
2DDD000
|
stack
|
page read and write
|
||
|
1A0000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
110000
|
heap
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
30F0000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
31CE000
|
stack
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
303D000
|
stack
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
9E0000
|
heap
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
3790000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
373E000
|
stack
|
page read and write
|
||
|
383E000
|
stack
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
3050000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3790000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
1C0000
|
heap
|
page read and write
|
||
|
3F1E000
|
heap
|
page execute and read and write
|
||
|
3929000
|
heap
|
page read and write
|
||
|
3790000
|
direct allocation
|
page read and write
|
||
|
1688000
|
heap
|
page read and write
|
||
|
3723000
|
heap
|
page read and write
|
||
|
8AF000
|
stack
|
page read and write
|
||
|
3F86000
|
heap
|
page read and write
|
||
|
3405000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3405000
|
heap
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
2F5A000
|
heap
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
3412000
|
heap
|
page read and write
|
||
|
A7D000
|
heap
|
page read and write
|
||
|
3790000
|
direct allocation
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
30F5000
|
heap
|
page read and write
|
||
|
3E20000
|
heap
|
page read and write
|
||
|
3190000
|
direct allocation
|
page read and write
|
||
|
3801000
|
heap
|
page read and write
|
||
|
3B9E000
|
direct allocation
|
page execute and read and write
|
||
|
3E4F000
|
stack
|
page read and write
|
||
|
A70000
|
heap
|
page read and write
|
||
|
3800000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
4A7000
|
unkown
|
page read and write
|
||
|
400000
|
unkown
|
page readonly
|
||
|
3600000
|
heap
|
page read and write
|
||
|
17A0000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3180000
|
heap
|
page read and write
|
||
|
3790000
|
direct allocation
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
401000
|
unkown
|
page execute read
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3C40000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3202000
|
heap
|
page read and write
|
||
|
485D000
|
direct allocation
|
page read and write
|
||
|
3CD1000
|
direct allocation
|
page execute and read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
100000
|
heap
|
page read and write
|
||
|
490000
|
unkown
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
4730000
|
direct allocation
|
page read and write
|
||
|
3200000
|
heap
|
page read and write
|
||
|
3E0B000
|
heap
|
page read and write
|
||
|
8B4000
|
stack
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3D40000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
443E000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
48CE000
|
direct allocation
|
page read and write
|
||
|
3E1C000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
19E000
|
stack
|
page read and write
|
||
|
9E4000
|
heap
|
page read and write
|
||
|
3D42000
|
direct allocation
|
page execute and read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3400000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
1A5000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3E0D000
|
heap
|
page read and write
|
||
|
46B3000
|
direct allocation
|
page read and write
|
||
|
3417000
|
heap
|
page read and write
|
||
|
3F2F000
|
heap
|
page read and write
|
||
|
990000
|
heap
|
page read and write
|
||
|
15E000
|
stack
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3E74000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
392D000
|
heap
|
page read and write
|
||
|
4AB000
|
unkown
|
page readonly
|
||
|
3E3A000
|
heap
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
482000
|
unkown
|
page readonly
|
||
|
3213000
|
heap
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
3EE9000
|
heap
|
page read and write
|
||
|
3790000
|
direct allocation
|
page read and write
|
||
|
4590000
|
direct allocation
|
page read and write
|
||
|
3F22000
|
heap
|
page read and write
|
||
|
3417000
|
heap
|
page read and write
|
||
|
167E000
|
stack
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
||
|
9A000
|
stack
|
page read and write
|
||
|
490000
|
unkown
|
page write copy
|
||
|
4859000
|
direct allocation
|
page read and write
|
||
|
3F41000
|
heap
|
page read and write
|
There are 224 hidden memdumps, click here to show them.