{"id":9210,"date":"2024-06-08T22:59:53","date_gmt":"2024-06-08T22:59:53","guid":{"rendered":"https:\/\/www.hexacorn.com\/blog\/?p=9210"},"modified":"2024-06-08T22:59:53","modified_gmt":"2024-06-08T22:59:53","slug":"pe-section-names-re-visited-again-2","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2024\/06\/08\/pe-section-names-re-visited-again-2\/","title":{"rendered":"PE Section names \u2013 re-visited, again"},"content":{"rendered":"\n<p>I recently caught up with torrents shared by <a href=\"https:\/\/virusshare.com\/\">VirusShare<\/a> and after merging the new VS samples with my repo decided to extract <a href=\"https:\/\/www.hexacorn.com\/blog\/category\/pe-sections\/\">PE section stats<\/a> from all the files again&#8230;. This time, instead of actually attributing section names to protectors, programs, etc. I just share the actual statistics file&#8230;<\/p>\n\n\n\n<p>So&#8230; there you have it&#8230; 100M entries, 660K unique section names &#8211; it is an interesting clustering exercise&#8230;<\/p>\n\n\n\n<p>You can download the resulting file <a href=\"https:\/\/hexacorn.com\/d\/2024-06-08_PE%20Sections.zip\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I recently caught up with torrents shared by VirusShare and after merging the new VS samples with my repo decided to extract PE section stats from all the files again&#8230;. This time, instead of actually attributing section names to protectors, &hellip; <a href=\"https:\/\/www.hexacorn.com\/blog\/2024\/06\/08\/pe-section-names-re-visited-again-2\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[120],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/9210"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=9210"}],"version-history":[{"count":3,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/9210\/revisions"}],"predecessor-version":[{"id":9215,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/9210\/revisions\/9215"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=9210"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=9210"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=9210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}