Benign pe-machine-learning-dataset Download

321303

Known recognized high-entropy resource markerVB6 runtime API dispatch

SHA-256874e7c0bd520c4b3a0ec7891b34b6031368e791dccec5aabebd18bf1dba10ab4

Evidence

VB6 DllFunctionCall thunk 0x1060–0x10c0

0x1060a8aaec4fc44df94fa8beef4f064ef94f...O.M.O...O.N.O
0x107057d1ef4f3abeef4fc46ffa4f088bee4fW..O:..O.o.O...O
0x10804b51ea4fd7b2f94f70d7eb4f30d9ef4fKQ.O...Op..O0..O
0x1090273bee4fb48ef04f60cfeb4f2099ef4f';.O...O`..O ..O
0x10a06aaff94f9bacf94fce6afa4fc41ffb4fj..O...O.j.O...O
0x10b0aac0ef4fc443f04fbd3aee4f4ec2ef4f...O.C.O.:.ON..O
0x10c01bacf94f1badf94fe8bdef4f67      ...O...O...Og   

.dll extension reference 0x21cb–0x21fb

0x21cbffe00000000c00000056657273696f6e.........Version
0x21db2e646c6c001400000047657446696c65.dll.....GetFile
0x21eb56657273696f6e496e666f5700d42140VersionInfoW..!@
0x21fb00e42140                        ..!@            

Known recognized high-entropy resource marker 0x9e293–0x9e2c3

0x9e293000000000089504e470d0a1a0a000000......PNG.......
0x9e2a30d494844520000020000000200080600.IHDR...........
0x9e2b30000f478d4fa00000009704859730000...x......pHYs..
0x9e2c30ec30000                        ....            

PE version resource structure 0xcaace–0xcaafe

0xcaace2000680400000a0000004c0334000000 .h.......L.4...
0xcaade560053005f0056004500520053004900V.S._.V.E.R.S.I.
0xcaaee4f004e005f0049004e0046004f000000O.N._.I.N.F.O...
0xcaafe0000bd04effe000001001f00210003  ............!.. 

PE FileVersion metadata field 0xcacfe–0xcae2e

⋯3 more rows
0xcad2e650061006c0000000000380016000100e.a.l.....8.....
0xcad3e460069006c0065005600650072007300F.i.l.e.V.e.r.s.
0xcad4e69006f006e0000000000330033002e00i.o.n.....3.3...
0xcad5e330031002e00300030003000330000003.1...0.0.0.3...
0xcad6e00003c0016000100500072006f006400..<.....P.r.o.d.
0xcad7e75006300740056006500720073006900u.c.t.V.e.r.s.i.
0xcad8e6f006e000000330033002e0033003100o.n...3.3...3.1.
⋯6 more rows
0xcadfe6e0061006d0065000000480079006500n.a.m.e...H.y.e.
0xcae0e720061006c006f0032002e0065007800r.a.l.o.2...e.x.
0xcae1e65000000000000000000000000000000e...............
0xcae2e000000000000                    ......          