Hostile ^100% pe-machine-learning-dataset Download

35845

Unsigned PE writable entry with multiple RWX sectionsBinary contains a UPX packing marker

SHA-256b6026ac1bca81257bd455e199244243f972c302e2f1d3f68182c5988aa1fd12b

MaleculeO₂(As₄Er)H₅(Cm₂Db₂MgOs₆Po₂)Md₄(Bi₁₀BkPaSi)

Evidence

English function-word token "this" 0x0–0xe0

0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000004000000000000000........@.......
0x2000000000000000000000000000000000................
0x30000000000000000000000000d8000000................
0x400e1fba0e00b409cd21b8014ccd215468........!..L.!Th
0x5069732070726f6772616d2063616e6e6fis program canno
⋯9 more rows

High-entropy UPX1 packed payload section 0x3a0–0x4d0

⋯5 more rows
0x3f0762b03006544000000a60000260100dbv+..eD......&...
0x400ff7ff7ff558bec83ec5c837d0c0f742b....U....\.}..t+
0x41005468b4514750d834818108b0d243f42.F.E.u..H....$?B
0x420ffbf6cff0089480450ff7510020c08ff..l...H.P.u.....
0x4301544724000e90100017553dd8c7df756[email protected]..}.V
⋯10 more rows

NSIS self-extracting installer 0x16e9–0x17b9

⋯3 more rows
0x1719e6e85291a9f0e81daa812c3fb2fd7dd8..R.......,?..}.
0x1729efbeadde0c9de4496e737490fe479a8f.......Inst..G..
0x1739e0736f6683dc4e756c6c757a0945f4fe.sof..Nulluz.E..
0x174909a7f29883e0020905c097eb8e5d2848.............](H
⋯7 more rows

Large anonymous PE section 0x23ba0–0x23ce0

⋯5 more rows
0x23bf000000000000000000000000000000000................
0x23c00558bec81ec8400000064ff3530000000U........d.50...
0x23c10588945dcc745ec00b60300c745cc433aX.E..E......E.C:
0x23c205c35c745d035656334c745d43237622e\5.E.5ec4.E.27b.
0x23c30c745d8657865008b45dc8b400c8b401c.E.exe..E..@..@.
⋯11 more rows

Modify memory page protection 0x36afc–0x36c1c

⋯5 more rows
0x36b4cf527dcbfe16bc112927b14a48dcaa01e.'...k...{......
0x36b5caa28d115ed86a32533a72064061765e4.(.....%3. d..e.
0x36b6cc3904d155216a6821f428e7a29e90f4e..M.R....B.z)..N
0x36b7cc2ae5d4110d89cce18986ef6b00e7cc6..]A......n...|.
0x36b8cdf69cfff651adbe6f4d6e2f2b10c6b47.i..e.........kG
0x36b9cc697f3716ff80809760f1939ac1300d6...qo...v..9....
0x36bac77d67acb4e9b09668ae990110352607ew.z.N..f.....R`~
⋯7 more rows