Skip to content

Command line utility to automatically patch IAT of PE files for a list of APIs

Notifications You must be signed in to change notification settings

fenilfadadu/auto_IAT_patcher

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

auto_IAT patcher

CLI extension to IAT_Patcher by Hashier Zade
IAT_Patcher: http://hasherezade.github.io/IAT_patcher/

Requires:

Autobuild:

Make sure that Qt and cmake requirement are satisfied
Clone the repository
To build it on Linux or MacOS you can use the given script - autobuild.sh.

git clone repo
cd auto_IAT_patcher
bash autobuild.sh

To use it:

Put all your executables in build/patcher/malware_src
run build/patcher/hook_em.sh:

cd build/patcher
bash hook_em.sh

Find hooked executables in build/patcher/malware_dst

Configurations:

1. Hook replacement declarations:b>

build/patcher/rep_list defines hook replacements

  • First line a number n, e.g. total number of hook declarations
  • n lines follows, each line is 4 tuple: original API, original dll, hooked API, hooked dll

About

Command line utility to automatically patch IAT of PE files for a list of APIs

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages