Malware Analysis - Unpack and Decompile PyInstaller Malware
We unpack and decompile a malware that was written in Python and transformed into an executable with PyInstaller. In order to do that we have to fix the header of the main script.
Malware analysis courses: https://malwareanalysis-for-hedgehogs...
Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter: / struppigel
Previous video about Python decompiling: • Malware Analysis - HolyCrypt and PowerWare...
Structure of .pyc files: https://nedbatchelder.com/blog/200804...
How to setup Python and Uncompyle6: • Video
Sample VirusBay: https://beta.virusbay.io/sample/brows...
Sample Hybrid-Analysis: https://www.hybrid-analysis.com/sampl...
pyinstxtractor: https://github.com/extremecoders-re/p...
Easy Python Decompiler: https://sourceforge.net/projects/easy...
PortexAnalyzer: https://github.com/katjahahn/PortEx/t...
HxD: https://mh-nexus.de/en/hxd/