Open-source atomic malware analysis

Analyze another

hash_example_test.go

GO
Verdict: HOSTILE
SHA256: 1f1a1389f5fe2f1a4510602aa9fe95ddd9ea68d07c110ff4d3f16dfa925da07c
Mal-ecule
O(Eu)H₂(CrDb)Md
Size 843 B download
First seen 37 days ago
Analyzed 36 days ago
Ecosystem windows

Objectives

Micro-behaviors

Metadata

0x1d fmt
0x1e fmt
0x25 github.com/oioio-space/maldev/hash
0x26 github.com/oioio-space/maldev/hash
0x9b payload
0x9c payload
0x1fa %#x\n
0x1fb %#x
0x20e LoadLibraryA
0x20f LoadLibraryA
0x31e %#x\n
0x31f %#x
0x338 kernel32.dll
0x339 kernel32.dll

Imports

fmt.Println
hash.SHA256
fmt.Printf
hash.ROR13
fmt.Printf
hash.ROR13Module
github.com/oioio-space/maldev/hash
fmt
No sections found

comments

chars 503
high entropy comments 1
lines 10
to code ratio 0.53
total 10

file

size 843

functions

avg length lines 4
avg name length 14.33
code in functions ratio 0.41
density per 100 lines 10.34
high entropy names 2
length stddev 0.82
max length lines 5
min length lines 3
no params count 3
total 3

identifiers

all lowercase ratio 0.4
avg entropy 2.81
avg length 10
base64 like names 3
has digit ratio 0.6
high entropy count 2
high entropy ratio 0.4
length stddev 5.69
max length 18
min length 3
numeric suffix count 2
reuse ratio 0.56
total 9
unique count 5

imports

stdlib count 1
stdlib ratio 0.13
third party count 7
third party ratio 0.88
total 8
unique modules 7

strings

avg entropy 2.6
avg length 10.86
entropy stddev 0.82
max length 34
total 14
total bytes 152

text

avg line length 28.07
char entropy 5.44
digit ratio 0.11
empty line ratio 0.17
high byte ratio 0.01
identifier density 0.31
identifiers to functions ratio 1.67
import density 27.59
imports to functions ratio 2.67
last line length 1
line length stddev 26.71
max inline whitespace run 1
max line length 76
most common char e
most common ratio 0.07
non ascii ratio 0.01
normalized function count 0.56
normalized import count 1.49
normalized string count 2.6
normalized unique identifiers 1.03
space count 69
string density 0.48
strings to functions ratio 4.67
suspicious comment ratio 0.1
suspicious identifier ratio 0.6
tab count 8
total lines 29
unique chars 71
whitespace ratio 0.13
source.functions[0] ExampleROR13
source.functions[1] ExampleROR13Module
source.functions[2] ExampleSHA256
source.has_imports true
source.imports[0] fmt
source.imports[1] fmt.Printf
source.imports[2] fmt.Println
source.imports[3] github.com/oioio-space/maldev/hash
source.imports[4] hash.ROR13
source.imports[5] hash.ROR13Module
source.imports[6] hash.SHA256
source.strings[0] LoadLibraryA
source.strings[1] github.com/oioio-space/maldev/hash
source.strings[2] kernel32.dll
source.strings[3] payload

Identity

SHA-256 1f1a1389f5fe2f1a4510602aa9fe95ddd9ea68d07c110ff4d3f16dfa925da07c
Filename hash_example_test.go

Origin

Ecosystem windows

Timeline

First seen 8 May 2026 16:27 UTC
Last analyzed 9 May 2026 12:19 UTC