Learning Malware Analysis

2.2.4 Hex View Window

You can click on the Hex View-1 tab to display the hex window. The hex window displays a sequence of bytes in a hex dump and the ASCII format. By default, the hex window is synchronized with the disassembly window; this means, when you select any item in the disassembly window, the corresponding bytes are highlighted in the hex window. The hex window is useful to inspect the contents of the memory address.