Benign pe-machine-learning-dataset Download

45235

Low entropy variance (uniform packing)VB6 runtime API dispatch

SHA-25647c287d672bda1db17e6b28c39d979887e1c1ea5cb5f6a37b16da7f994637c98

Evidence

Low entropy variance (uniform packing) 0x0–0x30

0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000004000000000000000........@.......
0x2000000000000000000000000000000000................
0x30000000000000000000000000b000    ..............  

VB6 DllFunctionCall thunk 0x1014–0x1064

0x1014bba194722176a2729982a3722f70a272...r!v.r...r/p.r
0x1024749ba072aa7fa272fda09472879ba072t..r...r...r...r
0x1034859aa072df47a272db7da372c489a372...r.G.r.}.r...r
0x1044267ea272560fa272e98fa2725dd0a372&~.rV..r...r]..r
0x10545dc8a17299dea172f753a172e3daa172]..r...r.S.r...r
0x1064f861a172a435947224              .a.r.5.r$       

.dll extension reference 0x212d–0x215d

0x212dffd0ffe00000000a0000006764693332...........gdi32
0x213d2e646c6c00000008000000456e645061.dll.......EndPa
0x214d74680038214000482140000000040064[email protected][email protected]
0x215d36410000                        6A..            

PE version resource structure 0x172b6–0x172e6

0x172b6010004002801000033753c0334000000....(...3u<.4...
0x172c6560053005f0056004500520053004900V.S._.V.E.R.S.I.
0x172d64f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0x172e60000bd04effe000001000400010000  ............... 

PE FileVersion metadata field 0x1751e–0x175fe

0x1751e200076003100000000002c000a000100 .v.1.....,.....
0x1752e460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0x1753e69006f006e000000000031002e003000i.o.n.....1...0.
0x1754e34000000000030000a000100500072004.....0.....P.r.
0x1755e6f006400750063007400560065007200o.d.u.c.t.V.e.r.
0x1756e730069006f006e00000031002e003000s.i.o.n...1...0.
⋯5 more rows
0x175ce460069006c0065006e0061006d006500F.i.l.e.n.a.m.e.
0x175de00004d0065006c006900620069006f00..M.e.l.i.b.i.o.
0x175ee730065002e0065007800650000005041s.e...e.x.e...PA
0x175fe4444494e47585850414444494e4750  DDINGXXPADDINGP 