SecureByte

SecureByte is a software tool that encrypts a payload and creates an executable file. The tool uses RSA encryption to encrypt an AES key, which is then used to encrypt the payload using AES encryption. The resulting encrypted AES key and encrypted payload are then combined to create an executable file. The tool also obfuscates the executable using PyArmor for added security.

Installation

To use SecureByte, you must have Python 3.x installed on your system. You can download Python from the official website at https://www.python.org/downloads/.

You will also need to install the following packages: pyinstaller cryptography tkinter

You can install these packages using pip.

Working

1. SecureByte works by encrypting the payload file using AES encryption with a randomly generated key.
2. The key is then encrypted using RSA encryption with a public key.
3. The encrypted public key is then again encrypted via the ECC public key for enhanced security
4. Both the encrypted key and the encrypted payload are embedded in a Python script stub.
5. When the obfuscated executable is executed, the script stub is decrypted and executed.
6. The script then decrypts the AES key using RSA decryption with a private key, and uses the decrypted key to decrypt the payload.
7. The decrypted payload is then executed.

This process ensures that the payload file remains encrypted and cannot be accessed without the private key, providing an additional layer of security. The obfuscation of the executable also helps to prevent reverse engineering and tampering.

Usage

To use SecureByte, simply run the SecureByte.py file. This will launch a GUI window that allows you to select the payload file that you want to encrypt. Once you have selected the file, click the "Execute Encryption" button to encrypt the payload and create the executable.

To use SecureByte, run the following command:

python3 FUD-SecureByte.py

Note:

For the next step, use only stub.py file generated in dist directory only. The reason to do is because the file in the dist directory is the obfuscated version of the malware whereas the stub.py file generated outside the dist directory is only an encrypted malware file.

Overview

This is a simple Python script that converts a Python file (.py) into an executable file (.exe) using PyInstaller.