Hostile ^100% pe-machine-learning-dataset Download

10399

Parasitic entrypoint drops an embedded PEParasitic PE dropper entrypoint

SHA-256436d8e556aa7251c0f943b33479affe5c7e595bcf32c5fe0728b2107a7a1547e

MaleculeO₅(CIAs₁₀Er₂P₄)H₁₀(CmDbDsFHfMgOs₇Po₅TiU₃)Md₅(Bi₁₁HePaSi)

Evidence

DJB2 hash algorithm constant (5381) 0x7b18–0x7bd8

⋯3 more rows
0x7b4800668b047023c785c0744a0fbec350e8.f..p#...tJ...P.
0x7b5805150000598bc883e9373b4d1073368b....Y....7;M.s6.
0x7b6875f8834d14083b75f47214750c83c8ffu..M..;u.r.u....
⋯7 more rows

x86 indirect call through a global pointer 0x7f22–0x7fe2

⋯3 more rows
0x7f52410085c00f84dc0000008b0d60014100A...........`.A.
0x7f628b35dca04000c1e10f03480cbb008000[email protected].....
0x7f720068004000005351ffd68b0d60014100[email protected]....`.A.
⋯7 more rows

Large null run in executable (64+ bytes) 0x9617–0x9787

⋯3 more rows
0x964745fd0fb64dfcc1e0080bc15f5e5bc9c3E...M......_^[..
0x965700000000000000000000000000000000................
0x966700000000000000000000000000000000................
0x967700000000000000000000000000000000................
0x968700000000000000000000000000000000................
0x969700000000000000000000000000000000................
0x96a700000000000000000000000000000000................
0x96b700000000000000000000000000000000................
0x96c700000000000000000000000000000000................
0x96d700000000000000000000000000000000................
0x96e700000000000000000000000000000000................
0x96f700000000000000000000000000000000................
0x970700000000000000000000000000000000................
0x971700000000000000000000000000000000................
⋯7 more rows

Dynamic library loading via LoadLibraryA 0x9fc4–0xa274

⋯3 more rows
0x9ff400000000000000000000000028ad0000............(...
0xa00436ad000048ad00005aad00006ead00006...H...Z...n...
0xa01400000000b2ac0000deac0000ecac0000................
0xa024ceac00000aad0000fcac0000beac0000................
0xa0349aac000000000000eea8000004a90000................
0xa04418a9000022a90000dea80000d0a80000...."...........
0xa054b0a80000a0a80000bea8000076a90000............v...
0xa06480a900008ca900004ca800003ea80000........L...>...
0xa07430a800001ea800000ea8000006a800000...............
0xa08472a8000092a8000082a8000054a90000r...........T...
0xa09462a800006aa9000034a9000044a90000b...j...4...D...
0xa0a4f8af0000c6af0000b0af0000d6af0000................
0xa0b4a2af000092af00007aaf00006eaf0000........z...n...
0xa0c486af000056af00004aaf000062af0000....V...J...b...
0xa0d42eaf000020af00003caf0000f8ae0000.... ...<.......
0xa0e4e8ae000006af0000bcae0000e6af0000................
0xa0f4f8a70000d6ae00008eae000074ae0000............t...
0xa1045aae000044ae000028ae000014ae0000Z...D...(.......
0xa11400ae0000f2ad0000e4ad0000d2ad0000................
0xa124c0ad0000acad0000a4ae000000000000................
0xa1348cad0000000000001eaa000050aa0000............P...
0xa1442eaa000064aa000042aa0000d2a90000....d...B.......
0xa154c2a90000b2a90000a6a9000074aa0000............t...
0xa1648caa000098aa000082ac000074ac0000............t...
⋯4 more rows
0xa1b466ab00002aab00004cab00003eab0000f...*...L...>...
0xa1c4fcaa000018ab00000aab0000c0aa0000................
0xa1d4e8aa0000d4aa00000caa0000aaaa0000................
0xa1e4f4a90000f2ab000006ac000000000000................
0xa1f400000000ffffffffef60400003614000.........`@..a@.
0xa2045f5f474c4f42414c5f484541505f5345__GLOBAL_HEAP_SE
⋯7 more rows

Resolves temp-file write and execution APIs 0x13fa0–0x14290

⋯5 more rows
0x13ff000000000000000000000000000000000................
0x14000558bec81ec6c01000033c05356578945U....l...3.SVW.E
0x14010dc8945f08945ec8945f88945f48945e0..E..E..E..E..E.
0x140208945e8c745b87479546cc745bc54432e.E..E.tyTl.E.TC.
0x1403065c745c078650000c745c400000000e8e.E.xe...E......
0x14040000000005805250200008945fc64a130....X.%....E.d.0
0x140500000008945d88b45fcc70083c404e98b....E..E........
0x1406045fcc74004a70dffff8b45d88b400c8b[email protected]..@..
0x14070401c8b008b40088b483c8b4c017803c8@[email protected]<.L.x..
⋯8 more rows
0x141003332c745a02e646c6cffd6e967ffffff32.E..dll...g...
0x1411081f957696e457511817a047865630075..WinEu..z.xec.u
0x14120088975f4e99200000081f9436c6f7375..u........Closu
0x1413017817a046548616e750e817a08646c65..z.eHanu..z.dle
0x141400075058975f8eb7381f9577269747517.u..u..s..Writu.
0x14150817a046546696c750e0fb74a0883f965.z.eFilu...J...e
0x1416075058975eceb548b0a81f94372656175u..u..T....Creau
0x1417017817a0474654669750e817a086c6541..z.teFiu..z.leA
0x141800075058975f0eb3381f9476574547517.u..u..3..GetTu.
0x14190817a04656d7050750e817a0861746841.z.empPu..z.athA
⋯8 more rows
0x14220ffff50ff55f08bf083feff74388b45fc..P.U......t8.E.
0x1423033c981384d5a9000740c404181f9f4013..8MZ..t.@A....
0x1424000007ceeeb0f578d4dd45168003e0000..|...W.M.Qh.>..
0x142505056ff55ec56ff55f86a058d8594feffPV.U.V.U.j......
0x14260ff50ff55f45f5e5bc9c30066186618d0.P.U._^[...f.f..
0x142702a4d5a90000300000004000000ffff00*MZ.............
0x1428000b80000000000000040000000000000.........@......
0x1429000000000000000000000000000000000................