Suspicious ^80% pe-machine-learning-dataset Download

27849

Packed, admin, opaque name

Authenticode chain CN: GRADIENT COMPANYPE manifest requests admin

SHA-256a136395fd70ef3efb7db3b15cf3a3b91696f62a3092e5bd7cab6b150d99b4cfd

MaleculeK(Mc)O₃(AsErPr)H₅(Cm₂F₂OsPo₅U)Md₄(Bi₅BkSi₄)

Evidence

Packed loader largest section ratio above 0.65 0x3c0–0x670

⋯3 more rows
0x3f000000000000000000000000000000000................
0x400e9979d0100c38bc0c38d4000ff252430..........@..%$0
0x4104200b808104000c3558bec81c474ffff[email protected]..
0x420ff890dac304200c605e23042008e213d....0B....0B..!=
0x430ae304200211ddc304200c745fc025201.0B.!..0B..E..R.
0x44000b8a41440008945f8c745f42feb0100[email protected]./...
0x4508b45f4508b45f8508b45fc50e8b30500.E.P.E.P.E.P....
0x4600085c0742b83ffff7c0ac70591304200...t+...|....0B.
0x470687001002b0506314200893d81304200hp..+..1B..=.0B.
0x4804666c705a3304200b26b89150a314200Ff...0B..k...1B.
0x490013d7f304200c705ff3042006c7a0100.=.0B....0B.lz..
0x4a066c7053e3042009c8bc745f05a8d0100f..>0B....E.Z...
0x4b0c745e856640100c745e48b7701008b45.E.Vd...E..w...E
0x4c0e4508b45e8508b45ec508b45f050e811.P.E.P.E.P.E.P..
0x4d0050000c68577ffffff00897c24fc894c.....w.....|$..L
0x4e024e089159630420089c266c705c63042$....0B...f...0B
0x4f0000889c745e013950100b8c014400089....E........@..
0x50045dcc745d8236d01008b45d8508b45dcE..E.#m...E.P.E.
0x510508b45e050e8da04000085c07412890dP.E.P.......t...
0x520853042008915703042008b055a304200.0B...p0B...Z0B.
0x530e8935f0100fe8577ffffff80bd77ffff.._....w.....w..
0x540ff0375963a550c7418870d0831420089..u.:U.t....1B..
0x5503def304200c705e3304200f1450100eb=.0B....0B..E...
0x5600d893d81304200897424dc83e711baff..=.0B..t$......
0x570010000893d723042008b5c2410390d99....=r0B..\$.9..
0x5803042007e1189055330420066c705dc300B.~...S0B.f...0
0x5904200b93ceb068935d1304200c745d4a6B..<...5.0B..E..
0x5a02c0100c745ccb6560100c745c8f8d101,...E..V...E....
0x5b0008b45c8508b45cc508b45d0508b45d4..E.P.E.P.E.P.E.
0x5c050e81e04000081e9cb000000891d7e30P.............~0
0x5d04200be51010000c70575304200192b01B..Q.....u0B..+.
0x5e00033c08945c4c745c0ffffffffb8d014.3..E..E........
0x5f040008945bc8b45bc508b45c0508b45c4@..E..E.P.E.P.E.
0x60050e8fe03000085c07416c6057f304200P.......t....0B.
0x6103abf070000008915ce304200895c24d8:........0B..\$.
0x620c68577ffffff00b8dc1440008945b833[email protected]
0x630c08945b433c08945b08b45b0508b45b4..E.3..E..E.P.E.
0x640508b45b850e8d203000085c0741cc605P.E.P.......t...
0x650923042001f89155630420089356a3042.0B....V0B..5j0B
0x66000890d3230420083c36afe8577ffffff...20B...j..w...
0x67080bd77ffffff0175ae8d05bb30420029..w....u....0B.)

ShellExecuteEx API call 0x1c213–0x1c493

⋯5 more rows
0x1c263657250617468416e6453756244697241erPathAndSubDirA
0x1c2730000005368656c6c4578656375746545...ShellExecuteE
0x1c28378570061647661706933322e646c6c00xW.advapi32.dll.
0x1c2930000004f626a656374436c6f73654175...ObjectCloseAu
⋯8 more rows
0x1c3234a6f624f626a65637400000000476574JobObject....Get
0x1c33354687265616454696d65730000000048ThreadTimes....H
0x1c34365617033324c69737446697273740000eap32ListFirst..
0x1c353004865617053697a6500000000476574.HeapSize....Get
⋯8 more rows
0x1c3e342756666410000000053657444656275BuffA....SetDebu
0x1c3f3674572726f724c6576656c0000000053gErrorLevel....S
0x1c403797374656d506172616d657465727349ystemParametersI
0x1c4136e666f4100000053657450726f705700nfoA...SetPropW.
0x1c423000000496e7665727452656374000000...InvertRect...
⋯7 more rows

PE resource entropy is at least 6.6 0x1d7c0–0x1d890

⋯3 more rows
0x1d7f000000000000000000000000000000000................
0x1d8000000000022bc01530000000000000400...."..S........
0x1d81003000000300000800a00000070000080....0.......p...
0x1d8200e000000e00000801800000020010080............ ...
⋯7 more rows

PE manifest requests admin 0x21f2c–0x2201c

⋯3 more rows
0x21f5c7374656450726976696c656765733e0astedPrivileges>.
0x21f6c3c726571756573746564457865637574<requestedExecut
0x21f7c696f6e4c6576656c206c6576656c3d22ionLevel level="
0x21f8c7265717569726541646d696e69737472requireAdministr
0x21f9c61746f72222075694163636573733d22ator" uiAccess="
0x21fac66616c7365223e3c2f72657175657374false"></request
⋯7 more rows

Cleartext http:// URL 0x222dc–0x223bc

0x222dc0b300906035504081302555431173015.0...U....UT1.0.
0x222ec0603550407130e53616c74204c616b65..U....Salt Lake
0x222fc2043697479311e301c060355040a1315 City1.0...U....
0x2230c54686520555345525452555354204e65The USERTRUST Ne
0x2231c74776f726b3121301f060355040b1318twork1!0...U....
0x2232c687474703a2f2f7777772e7573657274http://www.usert
0x2233c727573742e636f6d311d301b06035504rust.com1.0...U.
0x2234c03131455544e2d555345524669727374...UTN-USERFirst
⋯7 more rows