[r00tMe]

I am trying analyze a ransomeware which is not packed is ensured by using PEiD and ExeInfo packer detector and mostly in ensured by checking the section or that malware. All normal section.

That file has imports in import section but does not have any code / text section nor any functions except start function only.
I provided screenshot below please help.
Thanks
Rootme

[sysopfb]

Can you attach a sample?

Just because PEiD and exeinfo do not detected it to be packed or crypted does not mean it is not packed it just means it's not packed with a packer/crypter that has been signatured

[r00tMe]

Here you go the sample.

[r00tMe]

Here you go the sample.

[r00tMe]

included

[r00tMe]

Can you attach a sample?

Just because PEiD and exeinfo do not detected it to be packed or crypted does not mean it is not packed it just means it's not packed with a packer/crypter that has been signatured

How to unpack Qadas Malware it's similar to this malware !
Thanks