Clean files 1862 Malware files 1910 Number of
|Clean files| = 1862 |Malware files| = 1910 |Number of features| = 353 5
Оценка значимости признаков 121 The time stamp (Year: %i) of the Debug block reached the minimum (Year: %i) threshold 166 The file has no Version 136 The count (%i) of imported libraries reached the minimum (%i) threshold 73 The file is resource-less 16 The file checksum (0 x%08 X) is invalid 33 The file ignores cookies on the stack (GS) as mitigation technique 118 The time stamp (Year: %i)of the File Header reached the maximum (Year: %i) threshold 160 The original filename (%s) is different than the file name (%s) 114 The Offset (0 x%08 X) of the %s Directory is outside a section 333 The count (%i) of SEH functions reached the maximum (%i) threshold 104 The count (%i) of antidebug imported functions reached the maximum (%i) threshold 95 The count (%i) of deprecated imported functions reached the maximum (%i) threshold 69 The address of the entry point (0 x%08 X) is outside the first section 24 The file runs in the Visual Basic Virtual Machine 94 The count (%i) of exported blacklisted functions reached the maximum (%i) threshold 177 The file contains self-modifying code 9
- Slides: 11