Malware Analysis - Unpacking Locky with VirtualAlloc
Channel: MalwareAnalysisForHedgehogs
Date: 2016-05-27

A quick showcase of unpacking a Locky ransomware sample.

My malware analysis course for beginners: https://www.udemy.com/course/windows-malware-analysis-for-hedgehogs-beginner-training/?referralCode=EE0E2DC9FA7388FF25B7
Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter: https://twitter.com/struppigel

Sidenote: My fear of accidental execution is that it will encrypt the OllyDbg files which I still need to show the unpacking. Of course this is a VM. Do not ever get the idea to try this on your main system. X)

OllyDbg: http://www.ollydbg.de/
HxD: https://mh-nexus.de/en/hxd/

Locky: https://bazaar.abuse.ch/sample/49a48d4ff1b7973e55d5838f20107620ed808851231256bb94c85f6c80b8ebfc/