Hostile ^100% pe-machine-learning-dataset Download

22595

UPX packed, W+X sections, no signature

Binary contains a UPX packing markerXOR-decoded HTTP URL

SHA-256cd1cb6974f24f7df932f3bfb3123e6333c963f954ac9b455a4e95a6366bf0d28

Evidence

UPX packer marker string 0x1a0–0x280

⋯3 more rows
0x1d000000000000000000000000000000000................
0x1e055505830000000000070000000100000UPX0.....p......
0x1f000000000000400000000000000000000................
0x20000000000800000e05550583100000000........UPX1....
0x21000300000008000000022000000040000.0......."......
⋯7 more rows

Writable and exe section (W^X violation) 0x3a0–0x670

⋯5 more rows
0x3f024760000df1e0000004200002600003f$v.......B..&..?
0x400bffd5ffe8a442404258000c20400558b.._..D$.%.....U.
0x410ec81ec1c020b80a5e4fdffdd7ff7ffff................
0x4200053576a405933c08dbde50d8065f000[email protected]..
0x430f3ab66abaa107d73cddcdaf1ab0024e8..f...}s......$.
0x440fe221325fb1dbb1be9454a7508248d85.".%.....EJu.$..
0x4501c50e811f7ff5f761ca60b2d5883c40c.P...._v...-X...
0x46033db85c08945ec0f8eab2ffbd8ff76563....E..../...vV
0x4708b350430c46a108d45f06a0023528a84.5.0.j..E.j.#R..
0x4801d30b66d2ef68dbc0631165607ff3575.0.m.....1.V..5u
0x490ef2eff0fb60750744fbf40082e5750ff[email protected].
0x4a0d6065062873db95ee4fd1d87474348b7..Pb.=.^....GCH.
0x4b01076d62f49502d5a34eb7d02ebba1e14.v./IP-Z4.}.....
0x4c06851001f14433b5d581bacbba98c5d7ehQ...C;]X.....]~
0x4d05e19ffe1d5fb7ec3ff59596a01585f5b^.....~..YYj.X_[
0x4e0c9c33583ec0c5356574618ddffff7d77..5...SVWF....}w
0x4f033ff1f18158bf056072e593bc35974523......V..Y;.YtR
0x5003bf3744e538d97cbedff4df46a0a5150;.tNS.....M.j.QP
0x51056c645f48103f5c2f66cf7105c6eb7edV.E......l..\n..
0x520885df802f909fa5203fb8bfc456fffee.].....R....Eo..
0x530b7fd6518518283f8ff740903c6a37441..e.Q....t....tA
0x54078eb57f67d9709891d095f6d106947d3x.W.}....._m.iG.
0x5509c8c344308898660cd645bb062f7688b..4C...`.d[.b.h.
0x56086609dfbb10f84eb07475f848bc75f5e.`.......G_..._^
0x570dcd68bc736dcfe7c24148d47055050ff....6..|$..G.PP.
0x58015ab5050064c8bc3170eff7424108bd8..PP.L.....t$...
0x5905756536a1c043b2bf3aa5f77fb7f83eeWVSj..;+.._w....
0x5a005c600e98970015f8bc33fc3b81bce20.....p._..?.... 
0x5b07cdbf8bff651687c01070a6a598bc889|....Qh|...jY...
0x5c04df0313b06d7febb5bea740513284483M.1;....[.t..(D.
0x5d04dfcff6820030a85eec26e6c42f46154M..h .....nlB.aT
0x5e018013ef5750908bf8eb7cb02c8740433..>.u........t.3
0x5f0eb0fff3043481c7bbbb96f0f818be964...0CH.{..o....d
0x600890d0000ac6a061cd8d7bec21b2f1b0c.....j......./..
0x610d08811f16defc8848b0d5ba41018745d....m.....[...t]
0x620b6c9ae25142c0b0c680333921db0933e...%.,..h.3....>
0x6302a471705d144c36ef9df1733c0c36052*G...D.n...3..`R
0x64081c22c10521b41ac455de490edfe5a11..,.R.A.E]....Z.
0x6506ccc83034d66a4f36061ff255770507fl...Mf..`a.%WpP.
0x660ee8e911a202c914b889d90051b761f4e.... ,.K.....v.N
0x6702fcc28aa332245c40f841bd273b8a4cf/.(.3"E.....s...

Binary code section entropy at least 7.0 0x1e47–0x1ed7

0x1e47bbfff91fb623ceb4d6aac7f8d3f24372.....#........Cr
0x1e5765617465ffefe7dc5468065500025e7feate....Th.U..^.
0x1e6763737472696b652dfdf7fbf26f6e6c69cstrike-....onli
0x1e772e6578651540900351514c6f67ec1f7b[email protected]..{
0x1e87ac1514444e460754656e5361666513fe...DNF.TenSafe..
0x1e971fb23d636835617075770064736f756e..=ch5apuw.dsoun
0x1ea76414b3b7cfd34b6572526c33320dca7ed.....KerRl32..~
0x1eb7fbbfb665744d6f64756c654669034e61...etModuleFi.Na
0x1ec76d654197dabfbdd90f201c436c6f7365meA...... .Close
0x1ed748614edf                        HaN.            

XOR-decoded HTTP URL 0x9508–0x9628

⋯5 more rows
0x9558aa5e0000627b0000787878783b2b3778.^..b{..xxxx;+7x
0x9568100c0c084257570e080b4f4e56000d16....BWW...ONV...
0x9578151d11161d0c561b1715571411165619......V...W...V.
0x95880b087878787878787878787878787878..xxxxxxxxxxxxxx
0x959878787878787878787878787878787878xxxxxxxxxxxxxxxx
⋯9 more rows