<?xml version="1.0" encoding="UTF-8" standalone="yes"?><?xml-stylesheet type="text/xsl" href="/oai-pmh-repository/static/oai2.xsl"?>
<OAI-PMH xmlns="http://www.openarchives.org/OAI/2.0/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/ http://www.openarchives.org/OAI/2.0/OAI-PMH.xsd">
    <responseDate>2026-10-15T10:23:23Z</responseDate>
    <request verb="GetRecord" identifier="oai:data.mendeley.com/p3v94dft2y.3" metadataPrefix="oai_dc">https://data.mendeley.com/oai</request>
    <GetRecord>
        <record>
            <header>
                <identifier>oai:data.mendeley.com/p3v94dft2y.3</identifier>
                <datestamp>2024-06-04T07:02:32Z</datestamp>
            </header>
            <metadata><oai_dc:dc xsi:schemaLocation="http://www.openarchives.org/OAI/2.0/oai_dc/ http://www.openarchives.org/OAI/2.0/oai_dc.xsd" xmlns:oai_dc="http://www.openarchives.org/OAI/2.0/oai_dc/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <dc:creator>Moreira, Caio</dc:creator>
    <dc:title>Ransomware PE Header Feature Dataset</dc:title>
    <dc:publisher>Mendeley Data</dc:publisher>
    <dc:description>This dataset contains headers of 2157 binary executable samples comprising 1134 legitimate software (goodware) and 1023 ransomware, grouped into 25 ransomware families. The dataset was retrieved by extracting raw information of the PE header (first 1024 bytes).

The CSV file columns are sample ID, filename, target class (GR), family ID, and numerical columns from 0 to 1023, as follows:
			| 	ID			| 	filename			| GR	| 	family	| 			0 - 1023					|
Goodware	| 10000 to 11133	| Their name.exe		| 0	| 0			| Numerical features ranging from 0 to 255	|
Ransomware	| 20000 to 21022	| Their SHA-256 hash	| 1	| 25 family IDs	| Numerical features ranging from 0 to 255	|

Family IDs:
Avaddon			1
Babuk			2
Blackmatter		3
Conti			4
Darkside			5
Dharma			6
Doppelpaymer	7
Exorcist			8
Gandcrab		9
Lockbit			10
Makop			11
Maze			12
Mountlocker		13
Nefilim			14
Netwalker		15
Phobos			16
Pysa				17
Ragnarok		18
RansomeXX		19
Revil			20
Ryuk			21
Stop				22
Thanos			23
Wastedlocker		24
Zeppelin			25

A complete description of this dataset can be found in the paper &quot;Moreira, C.C., Moreira, D.C., Sales Jr., C. de S. de:
Improving Ransomware Detection based on Portable Executable Header using Xception Convolutional Neural Network. Computers &amp; Security, 103265 (2023), DOI: https://doi.org/10.1016/j.cose.2023.103265, URL: https://www.sciencedirect.com/science/article/pii/S016740482300175X &quot;

Please, reference our work when using this dataset.</dc:description>
    <dc:subject>Cybersecurity</dc:subject>
    <dc:subject>Malware Mitigation</dc:subject>
    <dc:subject>Data Analytics Cybersecurity</dc:subject>
    <dc:contributor>Moreira, Caio</dc:contributor>
    <dc:contributor>Moreira, Davi</dc:contributor>
    <dc:contributor>Sales Jr., Claudomiro</dc:contributor>
    <dc:type>Dataset</dc:type>
    <dc:identifier>doi:10.17632/p3v94dft2y.3</dc:identifier>
    <dc:identifier>oai:data.mendeley.com/p3v94dft2y.3</dc:identifier>
    <dc:rights>Creative Commons Attribution 4.0 International</dc:rights>
    <dc:rights>http://creativecommons.org/licenses/by/4.0</dc:rights>
    <dc:relation>https://data.mendeley.com/datasets/p3v94dft2y</dc:relation>
    <dc:date>2024-06-04T07:02:32Z</dc:date>
</oai_dc:dc></metadata>
        </record>
    </GetRecord>
</OAI-PMH>
