[HexaCoder]

i tried with unpy2exe and pydumpck with no Result...
I have watched in memory dump when file is executed and this is compiled with py2exe and made in python..

this is a virus, dont run on yours windows machine.

Code

drive[WARNING POSSIBLY INFECTED]google.com/file/d/13bk1PrP_oVClFoK2sXI2xPYIurZNOrlv/view?usp=sharing

I'm waiting for your response please, thank you

[notagh0st]

I've extracted it, except all the python libraries are compiled to pyc. So it'll take another round of reversing to get them from pyc to python. I have pydc which will decompile these files, give me a moment and I'll put them all in fresh files for you.

---

Update:

Here's my extract script that I used:

Code

#!/bin/bash
binwalk -eM Server.exe
cd _Server.exe.extracted/
find . -type f -name "*.pyc" | while read -r pyc_file; do
    dir=$(dirname "${pyc_file}")
    filename=$(basename "${pyc_file}" .pyc)
    pycdc "${pyc_file}" > "${dir}/${filename}.py"
done

And here are your files: https://mega[ dot ]nz/file/JxplzZ7A#0bh6NRgYQ52jjTm5nl3IV5gt2pGIPxgW2vbCB36tHKI

The .py files are along side the .pyc files. Keep in mind that the decompile process isn't perfect, but it looks like it got most of them correctly.