Suspicious 80% pe-machine-learning-dataset Download

42896

Obfuscated, unsigned, admin, registry, high entropy

PE has RT_ACCELERATOR resourcesPE has RT_DIALOG in resources list
SHA-256b981fecf4fe5ef8930c8e6147dcd415e14b55165706e1a2e2a32096273949b62

Evidence

One .text section dominates file 0x3c0–0x670
⋯3 more rows
0x3f000000000000000000000000000000000................
0x40001ae995187cd3f2f1890f9a454a7c331...Q..?/....T..1
0x410654bf08dac92556f579990b5dafadf1feK....UoW.......
0x420090acc9a04a74bf0f9fb10ec017a002e......K......z..
0x430560c16bec8ce740a9010638d4169110fV.....t...c.Ai..
0x44079834642489f17504922915202890a25y.FBH..PI".R...%
0x450c36aad5e96e6e29e7c32fd0719f7b23b.j.^....|2.....;
0x4604100c1e105a962753ef2d09e60f4c6f4A.....bu>...`...
0x4704d406c29d8eb8aabf452ad31ab995c71M@l).....R.1..\q
0x480cf4241e6000000000000000000000000.BA.............
0x49000000000000000000000000000000000................
0x4a0b0f907824580596b6519e9e7e07339cc....E.Yke....s9.
0x4b01cd1818e31f770841e0b7b6d23e95ff2....1.p...{m#._.
0x4c04fbe2757ad85417bb5d4c9426fafb28aO.'W..A{...Bo...
0x4d0094254a3f6df5845765546e703b8f4b1.BT...XEvUF.....
0x4e0acd4468a5b015a37cbd9521515bd1fdc..F.[.Z7..R.....
0x4f051754ae9dc200bfb4033d6234f294416QuJ.. ..@3.#O)D.
0x50062a954b305dfff0559575dccd00fe632b.T.....YW]....2
0x5108e7f449b9ca9748a65434b533e262dd0..D...t.eCKS>&-.
0x5201b419d21f5e622307ee63ccae8e691fc.A.!.."0~.<.....
0x5304e642df252aa4c4249f3d0f5b8c8017eNd-.R.LBI......~
0x540876155b6049482767afed0e76c2b34cb.aU....vz...l+4.
0x550c3e00931fd18bdb5fa77ed39f9f25dcd...1.....w.9..].
0x5603c89e94d727094e947e1690aff26ed95<..Mrp..G.i..&..
0x5707eefab7300000000ce8609eb47b55e00~..s........G.^.
0x5800a738bfa5e3e8fc5a968ca996aefbdb8.s..^>...h..j...
0x590a1f9a9384e7a4254a1909a5964cb5b05...8NzBT...Yd.[.
0x5a0bd967cff31c5f860c8b7f2da8907162c..|.1..`.......,
0x5b00143124b80d63491f36f32dc388249c6.C.K..4..o2.8.I.
0x5c0bad2a06f01f2ce7bdbfec0f353050ea5...o...{....S...
0x5d030195118a451c7b729f50339182e31dc0.Q..Q..)..9..1.
0x5e0f8d8345cce71005eca7c360a910deb6c..4\.q.^.|6....l
0x5f06a50a483dbd24e68ac1fb41eb91633a5jP....Nh......3.
0x600b4726132075493d1e6cd39f502f3ea90.ra2.T....9.....
0x610bedabe4f86cefcefa521ae303ac243b9...O.....!.0:.C.
0x620c83046a5f986f55b31cc851a511e4599.0F....[1...Q.E.
0x630afa883b9f14d06ed478259e91b4605c3.....M..G.Y..F..
0x640bea8c26afd5cb7b8e80f3b40555981ca...j.\....;@UY..
0x65077b4c2eabb71995e5b151f839d510516w....q.^[....Q..
0x66020ae4f3eb127a74e7e7fd61ccfb76ee1 .O>.'.N~.....n.
0x6703b8bd908a4401c683de583e5ca072668;[email protected]=.....&h
DJB2 hash algorithm constant (5381) 0x233a8–0x23468
0x233a8000000658f00003f00140000000092b5...e...?........
0x233b800000094310000000010e30000ca0000....1...........
0x233c80056200000000080000000c900000000.V .............
0x233d8cad50000e79a00000056008800000000.........V......
0x233e8051500006400e9340000007300000058....d..4...s...X
0x233f800000043c600cd0000b3fd000000d500...C............
0x2340800003b0000004500000024a900ca4d00..;...E...$...M.
0x23418007e6100000036f0000000000e220050.~a...6......".P
0x234280e0000001800b6e600f5af0000a39500................
0x23438000000f95d0000009c003b95002c0000....].....;..,..
0x23448000e00eb1b00000000f9ac0000000089................
0x23458000000006a009cbc0000005a1300f200....j......Z....
0x234680049007b840000001b00ec .I.{.......
Packed loader largest section ratio above 0.65 0x3a7c0–0x3aa70
0x3a7c0359d0067e20000005765000000869c005..g....We......
0x3a7d000000023000000250100759200005364...#...%..u...Sd
0x3a7e000007e00008d000000f7000000000592..~.............
0x3a7f0000000003d00f56200000008c7000000....=..b........
0x3a80089000000e39700b72100326400003000........!.2d..0.
0x3a8100000a1330000b6000000336a00000028...3......3j...(
0x3a820a6000000e300678800007200000000a8......g...r.....
0x3a830a800000000bd00000000d70000009800................
0x3a84000b90000760000001ee90000ae5c00e9....v........\..
0x3a8508a11243873b7d0db0ccccc5273f3af21..$8s......Rs..!
0x3a8606d9b65f9f5563cf3fa13ff1d2681d3c9m.e..V<.....&...
0x3a870e3fd37a9106ed183a4d79926dadff95f..7..n.....&..._
0x3a880bb399179e960461c569a65a2e132b17d.9.y.`F.V.e..2.}
0x3a890d3bba1accbdd122aa01cac4074230b2c.......*...@t#.,
0x3a8a0dd0ae9be76d6aa5a0aa7977550a71f96....v..Z...uP...
0x3a8b0c98962b4a7e2a30ed82c529dffbabf2b..b......,R....+
0x3a8c0f14fbf4a394c4dd5868348f4bad3b16f.O.J9LM...H....o
0x3a8d04f0c71262ca98d96584657ddde5b7430O.q&,...XFW..[t0
0x3a8e0a7d43c5b3dc76c8382f1f020857e8e35..<[=.l.... .~.5
0x3a8f0a71a1af0cf0cbae67ca154b898b663cd........|.T...c.
0x3a9005979c59682e32245aede4cc0d44749b3Yy...."E..L..GI.
0x3a910755663ac7b8e522ed44653517b9271e1uVc.{.R..FSQ{.q.
0x3a92015707ae6dd63602102217896ba3f55d8.pz..c`!.!x..?U.
0x3a9306c3a76d5d89a1e5d2c7df046c23e8ad1l:v....],}.F.>..
0x3a940de4a2453518126a1bebe7bccf1b07491.J$SQ.&...{...t.
0x3a9506d9d9ac5f32f92d458afb2537c88edd2m..../..X..S|...
0x3a960053c1b6ffe5672b49750fa7fd8c1fd17.<.o.Vr..P......
0x3a970a6a6f3734f06d97ba0899d602720f7b2...sO..{...`' ..
0x3a98019527aa7a3e224491e678b67827750d1.Rz...$I.g.g.wP.
0x3a990f79d143ab42f4cce8052d998d6bf9921...:./L..R.....!
0x3a9a01f5f89dd85006232c2e68f10e5108abf._....b2........
0x3a9b02f621c53373be33754c9421a8001f44b/b.S7;.7T.B....K
0x3a9c0816e705ccabf6ff916c6c2672ccf62ef.np\..o....g,.b.
0x3a9d0ed991fa5e378c8ab5ca43aa98347ce56.....x..\.:..G.V
0x3a9e0dd5d86a305bee1ba2a5a41ea16b15041.]......*ZA...PA
0x3a9f0cb51b72da037b84094334128eaf55c9b[email protected](..\.
0x3aa008bdbbe5eb1425705e6bd2cd999b985f4...^.BW...,.....
0x3aa1083e2a6d31bf1865750338e51e43acf7d.......WP3.Q.:.}
0x3aa205ba3e74b7a53b9a62a20a58a80b1537d[..KzS..* ....S}
0x3aa30f9e04ec537c101cce8c8cb004fd48115..N.7.......O...
0x3aa40a1ae2f752914a03b242031d0de37ffef../u)..;$ 1..7..
0x3aa50597551bf5c4945c5885980ce4edc3e9dYuQ.\IE..Y..N.>.
0x3aa60574afe06ad897bc1d25b2b4615527277WJ....{..[+F.Rrw
0x3aa704548d0c68eeba5b2ec36e2f7e8dc5205EH.......6....R.
x86 CREATE_NO_WINDOW stack argument 0x9e2fc–0x9e3bc
0x9e2fc000077e9000000c200d7b0000000dc00..w.............
0x9e30c00002615008300000000db00000000d0..&.............
0x9e31cb2009dfa000000005a6d00000050d500........Zm...P..
0x9e32c0000005b9a0000003b5f0068000000df...[....;_.h....
0x9e33c68000000081d004c68000070000027a4h......Lh..p..'.
0x9e34c00000000f2680000352e00000000bbbe.....h..5.......
0x9e35c000000c73400000000b8a1000000687f....4.........h.
0x9e36c00ef1e000000001f16000000a1ac0000................
0x9e37c005f00006f30000000fcca00fd000800._..o0..........
0x9e38c00ce00000000c5b000000023a500000e...........#....
0x9e39c000052f9000000007d0067c100000000..R.....}.g.....
0x9e3ac5d00009eb000003bde00991d0000db00]......;........
0x9e3bc00000095940000009400000000bc ..............
KUSER_SHARED_DATA structure access (uptime) 0xa4220–0xa42e0
0xa422000001d150000005200000000dee00053.......R.......S
0xa42306300a836000000d9910000d5d9000000c..6............
0xa4240760b00630c0000000d00000000f22400v..c..........$.
0xa4250880000460000bec000002aa7000089c8...F......*.....
0xa42600000fe7f000000630000000087e10000.......c........
0xa4270000059000001000000674c0000c51800..Y......gL.....
0xa42800000003c000000040000008d0000004a...<...........J
0xa42903b000000402300008af4002800000000;...@#.....(....
0xa42a02e1f0000004400000053000078d00000.....D...S..x...
0xa42b031000000e800009600001dd30000fb001...............
0xa42c040d0000071b10000e400000000cf7600@...q.........v.
0xa42d000000073006300f617000001ef000000...s.c..........
0xa42e0b400008ef5000078fd0000 .......x...

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.