MalFe

Please wait ...

Public Datasets

PE Version Info of Ransomware Rows: 1856 | Cols: 39 | Reports Used: 720

Description: Extract the data of the PE Version information of samples

Dataset SHA256: ac8f0104e72b356b00c51986d1c77e53bb9d147f3325e6e83e7c7580d42c7620

Features (sample):

	category	label	Translation	LegalCopyright	Assembly Version	InternalName	FileVersion	CompanyName	LegalTrademarks	Comments	ProductName	ProductVersion	FileDescription	OriginalFilename	SHA256	PortableApps.comAppID	PortableApps.comFormatVersion	PortableApps.comInstallerVersion	InternalSurnames	FileVersions	Copyright	TranslationUz	ProductionVersus	Copyrights	FileV	TranslationUsi	ProductVersus	Translations	FileVerus	ProductVers	InternalNames	FileVers	LegalCopyrighd	FileVersionz	CompiledScript	InternalSurname	ProductVersys	PrivateBuild	SpecialBuild
0	Ransomware	M	0x0000 0x04b0	Copyright \xa9 2021	1.0.0.3	SS Encrypter.exe	1.0.0.3			The Soviets Silver Monster	SS Encrypter	1.0.0.3	SovietSilver	SS Encrypter.exe	3d13bbe7750e38414ba19fd51fe8a253d791edb6a923af31fe5d56ae17af0eec	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN
1	Ransomware	M	0x0000 0x04b0	Copyright \xa9 2021	1.0.0.3	SS Encrypter.exe	1.0.0.3			The Soviets Silver Monster	SS Encrypter	1.0.0.3	SovietSilver	SS Encrypter.exe	3d13bbe7750e38414ba19fd51fe8a253d791edb6a923af31fe5d56ae17af0eec	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN
...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...	...
1854	Utilities	B	0x0409 0x04b0	2007-2020 PortableApps.com, PortableApps.com Installer 3.5.19.0	NaN	KCleaner Portable	3.8.2.112	PortableApps.com	PortableApps.com is a registered trademark of Rare Ideas, LLC.	For additional details, visit PortableApps.com	KCleaner Portable	3.8.2.112	KCleaner Portable	KCleanerPortable_3.8.2.112.paf.exe	100131e0f8c69510f2399211ed47b44c181953de80e3892f52aca126d36d97fe	KCleanerPortable	3.5.19	3.5.19.0	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN
1855	Utilities	B	0x0409 0x04b0	2007-2020 PortableApps.com, PortableApps.com Installer 3.5.19.0	NaN	KCleaner Portable	3.8.2.112	PortableApps.com	PortableApps.com is a registered trademark of Rare Ideas, LLC.	For additional details, visit PortableApps.com	KCleaner Portable	3.8.2.112	KCleaner Portable	KCleanerPortable_3.8.2.112.paf.exe	100131e0f8c69510f2399211ed47b44c181953de80e3892f52aca126d36d97fe	KCleanerPortable	3.5.19	3.5.19.0	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN	NaN

1856 rows × 39 columns

Created by: Avinash
Downloaded 1 times
Comments Enabled: True
Comments: 0

def process(data, filename, sha256, category, malicious):
    try:
        # Implement your data processing here, this function will get called with the data of each 
        # report in the category you have selected along with the filename of the report and hash. 
        # Do your processing and add your data to the features array, and return the features_lables, features, and sha256
        # PLEASE NOTE: THE CODE BELOW SERVES AS AN EXAMPLE ONLY! This example extracts the entropy of the PE Sections. Which can be seen here: https://malfe.cs.up.ac.za/datasets/view/Entropy_of_PE_Sections/5
        ###

features_labels = ["category", "label"]
        features = []
        label =   "M" if malicious else "B"
        if "static" in data:
            if "pe_versioninfo" in data["static"]:
                for pe in data["static"]["pe_versioninfo"]:
                    if pe["name"] not in features_labels:
                        features_labels.append(pe["name"])

for pe in data["static"]["pe_versioninfo"]:
                    tmp = [0]*len(features_labels)
                    tmp[0] = category
                    tmp[1] = label
                    for key in data["static"]["pe_versioninfo"]: 
                        tmp[features_labels.index(key["name"])] = key["value"]

features.append(tmp)            
        
        ###
        return features_labels, features, sha256
        
    except Exception as e:
        log("|process error| " + filename + " -> " + sha256 + " (" + str(e) + ")")
        pass

Nov. 18, 2022, 10:35 p.m. Public Create New Vesion Download Dataset (657.4 KB)

Version: 1
Date: Sept. 3, 2023, 6:28 p.m.
Created by: Avinash
Description: Updated version with 3084 samples.
Categories:

Rows: 8504 | Cols: 61 | Reports Used: 3084 Download Version 1 (2.5 MB)

Please wait ...

Public Datasets

PE Version Info of Ransomware Rows: 1856 | Cols: 39 | Reports Used: 720

Reports Used

Dataset Code

All Versions

Comments

No comments to display