Nov 28, 2018 Convert a.py to.exe in windows. Converting python files to executable's is fairly simple and we do this using pyinstaller. This method will work for one file or for multiple files that require. PyInstaller’s main advantages over similar tools are that PyInstaller works with Python 2.7 and 3.5—3.7, it builds smaller executables thanks to transparent compression, it is fully multi-platform, and use the OS support to load the dynamic libraries, thus ensuring full compatibility.

1. Make Python Script Executable
2. Python File To Executable And Dmg Free
3. Python File To Executable And Dmg Full
4. Python File To Executable And Dmg Tool

Author: In Ming Loh (inming.loh@countercept.com - @tantaryu)
Company: Countercept (@countercept)
Website: https://www.countercept.com

Introduction

A script that helps researcher to unpack and decompile executable written in python. However, right now this only supports executable created with py2exe and pyinstaller.

This script glues together several tools available to the community. Hopefully, this can help people in their daily job. Several YARA rules are available to determine if the executable is written in python (This script also confirms if the executable is created with either py2exe or pyinstaller).

Make Python Script Executable

Requirements

• Python 2.7 or later.
• Install all the dependency needed:
  pip2 install --user -r requirements.txt
  or if you fancy to have your dependency installed with root permission
  sudo pip2 install -r requirements.txt

Getting Started

Python File To Executable And Dmg Free

• python python_exe_unpack.py -i [malware.exe] Convert iso to dmg ubunut.

  • pyinstaller
    • A folder will be created with the original filename concatenated with '_extracted'. For example: 'malware.exe_extracted'.
    • The main python file that contains the logic will usually be the file without any extension (In the folder that concatenated with '_extracted'). In the following example, 'hello' is the one that contains the main python logic:
      -rw-rw-r-- 1 testuser testuser 70K Nov 14 13:08 bz2.pyd
-rw-rw-r-- 1 testuser testuser 993K Nov 14 13:08 _hashlib.pyd
-rw-rw-r-- 1 testuser testuser 111 Nov 14 13:08 hello
-rw-rw-r-- 1 testuser testuser 1009 Nov 14 13:08 hello.exe.manifest
-rw-rw-r-- 1 testuser testuser 1.1K Nov 14 13:08 Microsoft.VC90.CRT.manifest
-rw-rw-r-- 1 testuser testuser 220K Nov 14 13:08 msvcm90.dll
-rw-rw-r-- 1 testuser testuser 557K Nov 14 13:08 msvcp90.dll
-rw-rw-r-- 1 testuser testuser 638K Nov 14 13:08 msvcr90.dll
-rw-rw-r-- 1 testuser testuser 628K Nov 14 13:08 out00-PYZ.pyz
drwxrwxr-x 2 testuser testuser 12K Nov 14 13:08 out00-PYZ.pyz_extracted
-rw-rw-r-- 1 testuser testuser 5.2K Nov 14 13:08 pyiboot01_bootstrap
-rw-rw-r-- 1 testuser testuser 2.5K Nov 14 13:08 pyimod01_os_path
-rw-rw-r-- 1 testuser testuser 12K Nov 14 13:08 pyimod02_archive
-rw-rw-r-- 1 testuser testuser 22K Nov 14 13:08 pyimod03_importers
-rw-rw-r-- 1 testuser testuser 0 Nov 14 13:08 pyi-windows-manifest-filename hello.exe.manifest
-rw-rw-r-- 1 testuser testuser 2.6M Nov 14 13:08 python27.dll
-rw-rw-r-- 1 testuser testuser 10K Nov 14 13:08 select.pyd
-rw-rw-r-- 1 testuser testuser 234 Nov 14 13:08 struct
-rw-rw-r-- 1 testuser testuser 671K Nov 14 13:08 unicodedata.pyd
      
    • pyinstaller has an option that can encrypt python bytecode. This script will try to decrypt it and decompile the decrypted code.
  • py2exe
    • The result of unpacking and decompiling will be located in folder 'unpacked' or the location you specify.
    • If error like this shows 'Error in unpacking the exe. Probably due to version incompability (exe created using python 2 and run this script with python 3)', try setting your python to a different version than the one you are using. Eg: 'alias python=python2' or 'alias python=python3'

• python python_exe_unpack.py -p [pyc file]

  • In the above example, sometimes the python file that contains the main logic will not be in the format that uncompyle6 accept (Missing python magic numbers). The above command will prepend magic numbers and decompile it (If magic number is already preprended it will not add it and just proceed with decompiling).

Python File To Executable And Dmg Full

Credits

Python File To Executable And Dmg Tool

• Extreme Coders for their pyinstxtractor.py script to help unpack pyinstaller executable.
• Extreme Coders for their instruction on how to decrypt encrypted python byte code: https://0xec.blogspot.sg/2017/02/extracting-encrypted-pyinstaller.html
• unpy2exe
• uncompyle6