This video, we will learn how to decode and decompiled HBK files.
You can do the same for any application you'll download from the reference websites given earlier in
this course and as well for any upcoming AP case that we will use in the upcoming videos.
So we will use the Trojan signed a B.K..
So let's start by compiling this application.
You open the terminal here and let's go to the desktop.
As you can see, we have two applications, the first comment to use is a B.K. tool space D and then
Torossian Dash signs dot APJ.
Press enter.
You'll see that a new fooler has been populated here.
Let's open that folder and see the contents.
If you double click on the Android manifest now, you'll be able to read that file and do the permissions
review.
We'll do that later.
Now we need to decompiled the children, the AP, Caifa.
If you double click on that file, you'll be able to see the classes, the D X File that has all the
compiled code or Java code.
No, I will issue another command, which is D2 G, which is Decs to Geor and then we reference the
Trillian dash sine dot APJ file.
Notice here that any new file has been created with the extension of the jar jar extension or purely
Java files that can be viewed with.
We'll use this tool here called Jadi Gooey.
I'll minimize that here.
You should drag and drop this file.
You'll be able to see only classes in a human readable format.
So we will use this file or this combination of file and files and classes in addition to the Android
manifest that Excel file to perform our static malware analysis.
One thing to note here that if you downloading a file from the Internet, some of these files might
be zipped.
The command to use is seven zie dash e4 extract, then the name of the file, then the extension that
Zipp or DOT seven zie.