1

This question already has an answer here:

I`m working on this malware to analyze:

http://www.freeuploadsite.com/do.php?id=74209
password: infected

It seems it is packed but when I use "PE View" , etc tools to find the packer, their results are nothing.

How can I unpack this malware manually?

Thanks a lot.

marked as duplicate by perror, 0xec, Guntram Blohm, Jason Geffner, Dominik Antal Jul 1 '15 at 2:28

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • Have you tried PEiD or Protection ID? If you know what packer it is your job becomes much easier. – Papo2010 Jun 29 '15 at 11:01