Hostile ^100% pe-machine-learning-dataset Download

40549

Unsigned embedded payload, packed, W^X

Unsigned PE writable entry with multiple RWX sectionsClaimed PE certificate table is truncated

SHA-2564472c45806b98486c8b2bd587c10ec4d3c3f76bbae59e56db65fab58e1fd3f5d

MaleculeO₃(As₆Er₂C)H₆(Cm₃Db₂F₉Os₈Po₅U)Md₄(Bi₈BkPaSi)

Evidence

English function-word token "this" 0x0–0xe0

0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000004000000000000000........@.......
0x2000000000000000000000000000000000................
0x30000000000000000000000000e0000000................
0x400e1fba0e00b409cd21b8014ccd215468........!..L.!Th
0x5069732070726f6772616d2063616e6e6fis program canno
⋯9 more rows

CreateFile API string reference 0x77d0–0x7a70

⋯3 more rows
0x78004765745469636b436f756e7400005600GetTickCount..V.
0x781043726561746546696c65570063014765CreateFileW.c.Ge
0x78207446696c6553697a65007e014765744dtFileSize.~.GetM
⋯4 more rows
0x787047657457696e646f7773446972656374GetWindowsDirect
0x78806f7279570000d60147657454656d7050oryW....GetTempP
0x78906174685700001101476574436f6d6d61athW....GetComma
0x78a06e644c696e6557001503536574457272ndLineW...SetErr
⋯8 more rows
0x793043726561746550726f63657373570000CreateProcessW..
0x7940c3036c737472636d70694100d4014765..lstrcmpiA...Ge
0x79507454656d7046696c654e616d65570000tTempFileNameW..
0x7960be036c737472636174570000a0014765..lstrcatW....Ge
⋯17 more rows

GetDiskFreeSpace API import 0x7f86–0x8276

⋯3 more rows
0x7fb67565727956616c756545785700000502ueryValueExW....
0x7fc652656753657456616c75654578570000RegSetValueExW..
0x7fd6d2015265674372656174654b65794578..RegCreateKeyEx
0x7fe65700d90152656744656c65746556616cW...RegDeleteVal
0x7ff67565570041445641504933322e646c6cueW.ADVAPI32.dll
0x800600003800496d6167654c6973745f4465..8.ImageList_De
0x80167374726f79003400496d6167654c6973stroy.4.ImageLis
0x8026745f4164644d61736b6564003700496dt_AddMasked.7.Im
0x80366167654c6973745f4372656174650000ageList_Create..
0x8046434f4d43544c33322e646c6c00001000COMCTL32.dll....
0x8056436f437265617465496e7374616e6365CoCreateInstance
0x8066000005014f6c65556e696e697469616c....OleUninitial
0x8076697a6500ee004f6c65496e697469616cize...OleInitial
0x8086697a65006500436f5461736b4d656d46ize.e.CoTaskMemF
0x8096726565006f6c6533322e646c6c000d00ree.ole32.dll...
0x80a6566572517565727956616c7565570000VerQueryValueW..
0x80b6030047657446696c6556657273696f6e..GetFileVersion
0x80c6496e666f5700020047657446696c6556InfoW...GetFileV
0x80d6657273696f6e496e666f53697a655700ersionInfoSizeW.
0x80e656455253494f4e2e646c6c0000000000VERSION.dll.....
0x80f600000000000000000000000000000000................
0x810600000000000000000000000000000000................
0x811600000000000000000000000000000000................
0x812600000000000000000000000000000000................
0x813600000000000000000000000000000000................
0x814600000000000000000000000000000000................
0x815600000000000000000000000000000000................
0x816600000000000000000000000000000000................
0x817600000000000000000000000000000000................
0x818600000000000000000000000000000000................
0x819600000000000000000000000000000000................
0x81a600000000000000000000000000000000................
0x81b600000000000000000000000000000000................
0x81c600000000000000000000000000000000................
0x81d600000000000000000000000000000000................
0x81e600000000000000000000000000000000................
0x81f600000000000000000000600647009213..........`.G...
⋯4 more rows
0x824600006700000000000000000000000000..g.............
0x82560000188840000488400018884000f887....@...@...@...
0x82664000ec874000dc874000ec874000c887@...@...@...@...
0x82764000ec874000b0874000ec8740009887@...@...@...@...

Writable and exe section (W^X violation) 0x379a0–0x37ad0

⋯5 more rows
0x379f000000000000000000000000000000000................
0x37a00558bec81ec8400000064ff3530000000U........d.50...
0x37a10588945dcc745ec00b60300c745cc433aX.E..E......E.C:
0x37a205c34c745d036323033c745d46233312e\4.E.6203.E.b31.
⋯11 more rows

ASPack packer marker 0x37f08–0x38028

⋯5 more rows
0x37f580000000000000000000000400000c22e...........@....
0x37f6861737061636b00004000000080040000aspack..@.......
0x37f783c0000007a0300000000000000000000<...z...........
⋯11 more rows