File triage checklist
What to record before any analysis.
3 docs tagged with "Malware analysis"
View all tagsReading PE imports
What imports suggest, and what they cannot prove.
What hash reputation can and cannot tell you
An unknown hash is a starting point, not a verdict.