1. Lab01-01.exe SHA256: 58898bd42c5bd3bf9b1389f0eee5b39cd59180e8370eb9ea838a0b327bd6fe47 1-1) When was file compiled? 1-2) What indicators exist that file is either packed or obfuscated? 1-3) Which imports provide hints about what this malware does? 1-4) What network-based indicators could be used to find this malware on infected machines? 1-5) What is your suspected purpose of this file?
2. Lab01-01.dll SHA256: f50e42c8dfaab649bde0398867e930b86c2a599e8db83b8260393082268f2dba 2-1) When was file compiled? 2-2) What indicators exist that file is either packed or obfuscated? 2-3) Which imports provide hints about what this malware does? 2-4) What network-based indicators could be used to find this malware on infected machines? 2-5) What is your suspected purpose of this file?