Suspicious ^80% pe-machine-learning-dataset Download

9113

Signed, but obfuscated and evasive

Authenticode chain CN: LLC "DIYEVO"Cert chain has only 2 entries

SHA-2567d181547808e6013e9c46fe06190c43a5da6f06eeaeffdcf27b781e314ec4816

MaleculeK(Mc₂)O₄(As₃CDyEr₂)H₇(Cm₂CrDb₂FOs₄Po₃U)Md₆(Bi₈BkPtSi₄)

Evidence

Small code section in large PE 0x3c0–0x650

⋯3 more rows
0x3f000000000000000000000000000000000................
0x40068f6924200e8f87a000059c368eb9242h..B...z..Y.h..B
0x41000e8ec7a000059c368e0924200e8e07a...z..Y.h..B...z
0x420000059c36801934200e8d47a000059c3..Y.h..B...z..Y.
⋯35 more rows

x86 CREATE_NO_WINDOW stack argument 0x176f–0x182f

⋯3 more rows
0x179f9c24840000008d442470550f43442474.$.....D$pU.CD$t
0x17af68000000086a035556680000008050ffh....j.UVh....P.
0x17bf1568a042008bf083feff752aff1520a0.h.B......u*.. .
⋯7 more rows

DJB2 hash algorithm constant (5381) 0x5e8f–0x5f4f

⋯3 more rows
0x5ebf595983f8ff751b68e80f43008d4ddce8YY...u.h..C..M..
0x5ecf051500006810a643008d45dc50e8af73....h..C..E.P..s
0x5edf00008b75e88bce893510f043008b06ff...u....5..C....
⋯7 more rows

x86 indirect call through a global pointer 0x7e10–0x7ed0

⋯3 more rows
0x7e40c38b75e4e86d490000c3558bec515356..u..mI...U..QSV
0x7e508b35a8a0420057ff3510014400ffd6ff.5..B.W.5..D....
0x7e60350c0144008945fcffd68bd88b45fc3b5..D..E......E.;
⋯7 more rows

Inline MZ header validation constant 0x8123–0x8203

⋯3 more rows
0x8153e8575d00000fb7f06a02e8195b000059.W].....j...[..Y
0x8163b84d5a000066390500004000740433db[email protected].
0x8173eb33a13c00400081b800004000504500.3.<.@[email protected].
0x81830075ebb90b0100006639881800400075[email protected]
0x8193dd33db83b8740040000e76093998e800[email protected]...
⋯7 more rows