Welcome back.
We are now going to start a new lapsation to analyze Melgar sample and the to go and download this small
sample.
And Tzipi.
The password to imagine the cracking lessens dot com.
After and keeping open the folder and this is your sample inside here.
As you will notice, he takes on the Excel icon and he has gotten a double extension casual user will
not see the real extension because the default setting for Windows will be to hide the extension.
He or she will only see an icon and will be fooled into thinking that it is an example.
So the first thing to do is to analyze the toinette.
You open up to Nancy.
Tonight is useful identifying what type of this it is, Zimpher.
Oh, yeah, alcohol or anything else.
And you can see sort of he tells you, fifty five percent is up compressed and you can rumpy another
two to confirm it.
Let's open the utilities and look for EIC being for.
And we know and that I hope and expect uptakes.
And then he tell us how the unpegged using the common Dashti, so Reisenbach now.
Copy this part here, right, click and copy and then open your command from.
And then navigate get to the folder, the extension of a tax CD space and directly to paste a part of
you that you have copied earlier into and you will change directory
this time to document, to confirm that the only current territory and you can see the name of the malware
here to unpack the file we used to command it to suggest to the command is I also give you the tips
in the previous video on how to unpack it.
So take a look at the notes from the piece, you, young man, is you destined for decompress and dash
zero before the opening and then the name of the father and.
So let's try this now.
So to Uncompress, to unpack it, we used to you guys, come on, you just you guys you don't know any
permit to enter, he would give you the help.
So that is clear.
The screen size you can see and you would find him.
And the new Congress, so let's clear the screen now, you know how to use it, you d to decompress
and dash who wants a new funding that you want to give it.
So the financial impact.
Next, we put a space and time in the name of the delegates.
So this is a common line to unpack the mailbag and to CBSA, a different file, financials.
And so after writing this on, you should have a new filing here.
So just press enter.
And then you see the fall and then you find him.
So this is a new technique you've got.
And now if you were to run treatment and you found this crazy.
And you see, he doesn't see you expect anymore.
Instead, we get a report saying he's 72 executable, Microsoft, Michaux, C++, and then you check
ESPN for again.
And now you see the crowd didn't see those anymore, so we are ready to proceed to the next stage of
the static analysis.
So for that, I'll see you in the next video.
Thank you for watching.