Malware Analysis - Unpack and Decompile PyInstaller Malware

We unpack and decompile a malware that was written in Python and transformed into an executable with PyInstaller. In order to do that we have to fix the header of the main script.

My malware analysis course for beginners: https://www.udemy.com/course/windows-...
Buy me a coffee: https://ko-fi.com/struppigel
Follow me on Twitter: Twitter: struppigel

Previous video about Python decompiling: Malware Analysis - HolyCrypt and Powe...
Structure of .pyc files: https://nedbatchelder.com/blog/200804...
How to setup Python and Uncompyle6: Video
Sample VirusBay: https://beta.virusbay.io/sample/brows...
Sample Hybrid-Analysis: https://www.hybrid-analysis.com/sampl...

pyinstxtractor: https://github.com/extremecoders-re/p...
Easy Python Decompiler: https://sourceforge.net/projects/easy...
PortexAnalyzer: https://github.com/katjahahn/PortEx/t...
HxD: https://mh-nexus.de/en/hxd/

• #science_technology
• #malware_analysis
• #reverse_engineering
• #python
• #decompile
• #header_fix
• #pyinstaller
• #py2exe
• #easy_python_decompiler
• #pyc
• #malware
• #ransomware
• #pyinstxtractor
• #hc6