Hostile ^100% pe-machine-learning-dataset Download

52651

Packed, embedded PE, high entropy

Blank-named high-entropy executable sectionFour-section PE with opaque high-entropy code

SHA-2566e87e97a371d49403047cb71d024efc0bfa1b6aec996ea16579c237ee23791af

MaleculeK(Mc)O₄(As₅CErI)H₅(DbMg₂Os₃Po₃U)Md₄(Bi₈HeSi)

Evidence

English function-word token "this" 0x0–0xe0

0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000004000000000000000........@.......
0x2000000000000000000000000000000000................
0x30000000000000000000000000e0000000................
0x400e1fba0e00b409cd21b8014ccd215468........!..L.!Th
0x5069732070726f6772616d2063616e6e6fis program canno
⋯9 more rows

x86 indirect call through a global pointer 0x2fc2–0x3082

⋯3 more rows
0x2ff2400085c00f84dc0000008b0d70864000@...........p.@.
0x30028b3558504000c1e10f03480cbb008000[email protected].....
0x30120068004000005351ffd68b0d70864000[email protected].@.
⋯7 more rows

Large null run in executable (64+ bytes) 0x45ad–0x471d

⋯3 more rows
0x45dd8b4424085fc38b442404c3ff25605040.D$._..D$...%`P@
0x45ed00000000000000000000000000000000................
0x45fd00000000000000000000000000000000................
0x460d00000000000000000000000000000000................
0x461d00000000000000000000000000000000................
0x462d00000000000000000000000000000000................
0x463d00000000000000000000000000000000................
0x464d00000000000000000000000000000000................
0x465d00000000000000000000000000000000................
0x466d00000000000000000000000000000000................
0x467d00000000000000000000000000000000................
0x468d00000000000000000000000000000000................
0x469d00000000000000000000000000000000................
0x46ad00000000000000000000000000000000................
⋯7 more rows

Create private heap (HeapCreate) 0x4fc8–0x5128

⋯3 more rows
0x4ff80000000000000000bc560000c0570000.........V...W..
0x5008385500004c5500005e550000705500008U..LU..^U..pU..
0x50187e5500008c550000a0550000b4550000~U...U...U...U..
0x5028d0550000e6550000005600001a560000.U...U...V...V..
0x5038305600004856000062560000745600000V..HV..bV..tV..
0x50488456000092560000ac560000ca560000.V...V...V...V..
0x5058d8560000e6560000f2560000fe560000.V...V...V...V..
0x50680a57000016570000205700002c570000.W...W.. W..,W..
0x5078385700004857000056570000685700008W..HW..VW..hW..
0x5088785700008e5700009e570000ae570000xW...W...W...W..
0x5098000000001c5500000000000000000000.....U..........
0x50a8ffffffff171140002b1140005f5f474c......@.+.@.__GL
0x50b84f42414c5f484541505f53454c454354OBAL_HEAP_SELECT
⋯7 more rows

Blank-named high-entropy executable section 0x8fa0–0x90f0

⋯5 more rows
0x8ff000000000000000000000000000000000................
0x9000558bec81ec840000008365ec008365b0U.........e...e.
0x9010008365e0008365f0008365fc00e80000..e...e...e.....
0x902000005805900200008945e864a1300000..X......E.d.0..
0x9030008945d8c745c4433a5c34c745c86462..E..E.C:\4.E.db
0x90403832c745cc6236332ec745d06578650082.E.b63..E.exe.
0x90508b45d88b400c8b401c8b008945e48b45.E..@[email protected]
0x9060e48b40088945f48b45e8c70083c404e9[email protected].......
0x90708b45e8c74004867dffff8b45f48b403c.E..@..}...E..@<
0x90808b4df48b55f4035401788955dc8b45dc.M..U..T.x.U..E.
⋯7 more rows