{"id":18755819,"url":"https://github.com/kasperskylab/apihashes","last_synced_at":"2025-10-07T17:19:15.501Z","repository":{"id":49065585,"uuid":"491533611","full_name":"KasperskyLab/Apihashes","owner":"KasperskyLab","description":"IDA Pro plugin for recognizing known hashes of API function names","archived":false,"fork":false,"pushed_at":"2022-05-12T13:51:13.000Z","size":4382,"stargazers_count":81,"open_issues_count":0,"forks_count":15,"subscribers_count":4,"default_branch":"master","last_synced_at":"2025-04-13T01:56:43.973Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/KasperskyLab.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"License.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2022-05-12T13:50:32.000Z","updated_at":"2025-01-31T12:27:10.000Z","dependencies_parsed_at":"2022-09-10T14:51:01.434Z","dependency_job_id":null,"html_url":"https://github.com/KasperskyLab/Apihashes","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KasperskyLab%2FApihashes","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KasperskyLab%2FApihashes/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KasperskyLab%2FApihashes/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KasperskyLab%2FApihashes/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/KasperskyLab","download_url":"https://codeload.github.com/KasperskyLab/Apihashes/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248654050,"owners_count":21140235,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-07T17:34:02.838Z","updated_at":"2025-10-07T17:19:10.447Z","avatar_url":"https://github.com/KasperskyLab.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"## Apihashes v2 IDA plugin\n\nApihashes is an IDA plugin that allows to automatically identify and mark known hash values for API function names. \n\nThe plugin is implemented as a hook that checks the operands of new instructions and data items, and uses a database of pre-calculated hashes.\n\nThe database is generated from a set of PE files using a script \"make\\_apihashesv2\\_table.py\". You can modify the script to add new hashing algorithms and non-standard DLLs.\n\n## Installation\n\nCopy the files apihashesv2.py, apihashesv2.bin (the database) and the directory apihashesv2\\_search into the %IDADIR%/plugins directory. The plugin should be loaded automatically when IDA starts.\n\nDependencies: Python 3, pefile.\n\n## Generating your own database\n\nIf needed, modify make\\_apihashesv2\\_table.py to add the new hashing algoritm. Add the function to the *hashers* list.\n\nRun the script, providing the directories or filenames containing the target DLLs, for example the Windows \"system32\" directory.\n\n```\npython3 make_apihashesv2_table.py ...path_to_system32...\n```\n\nProcessing will take some time, and as a result the script will generate a new file *apihashesv2.bin* in the current directory. Copy it to the %IDADIR%/plugins directory and reload IDA.\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkasperskylab%2Fapihashes","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkasperskylab%2Fapihashes","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkasperskylab%2Fapihashes/lists"}