Hello and welcome back in this new section.
I'm going to give you that exercise and this video is the instructions for a malware sample to.
So going down with sample to from the resource section for this lesson and copy into.
Which you machine?
The password to unzip is, as usual, cracking lessons that come through the password for unzipping
these cranky attachments dot com.
So after a fancy.
Try on your own before seeing a nice video.
Used to connect to to do static analysis first you will find that it is packed.
You can use.
E, c, p, e for.
He will show you that he's back or not.
Also, you can use the studio or CFX power and examine the table to see how many functions are imported
from the number of functions you find.
And they are very, very few functions that are important.
And that is a red flag indicating that the malware is packed.
So you see people also give you a hint on what Paku is used, so you will find it is packed with you
be X, so if you respect uplinks you can unpack it using up as well.
The Flavien, which a machine comes with UPS.
So all you need to do is open CMG Command prompt and type in this command.
Of course you need to go to the folder first and that contains the malware.
And then assuming that the mother's name is called How Is Your Name EIC.
So you need to unpack it and give it a new name.
So assuming it's a new name that you are going to give it.
After unpegging, so this is a common pupate space, dashty for for packing and industrial output,
finding a new name, then space ARZIANI.
So after backing, you will find a new file in the folder calling your name or whatever name you give
it, and then use this Unbaked Eustachy for static analysis as well as dynamic analysis, as usual.
This is life, Mildmay.
So be careful.
Make sure you run it in the virtual machine and don't accidentally click it in the host machine and
unzip it in the washing machine.
Do not be in the host machine.
This is additional precautions for safety in case you extend the runway and if necessary, you may want
to set your washing machine to host only more.
So if you're running this office environment or the network in your workplace, you might want to want
to infect the company.
Anyway, this is not warm, so don't worry, he will not transmit himself truly never, even if you
don't set it to being host to host anymore.
But if in future you are analyzing in a normal way, then you might want to take additional steps to
protect yourself from worms.
So, OK, who did I leave to you to go and do the exercise and then I'll see you in the next one and
please make an effort, try on your own before you watch the rest of the videos on how I do it.
Thank you for watching.
See you next month.
And good luck.