# d35ha/CallObfuscator

Obfuscate specific windows apis with different apis

Repository: https://github.com/d35ha/CallObfuscator
Canonical: https://ross.abutalabs.com/products/callobfuscator
Language: C++
License Family: other
Topics: windows-api, c-plus-plus, malware-research
Last push: 2021-02-21T20:09:43+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 2621, "days_push": 2019, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1024, forks 174 (observed 2026-08-28T04:03:16.416486+00:00)

## What it is
CallObfuscator is a C++ library and CLI tool that hides Windows PE imports by rewriting the Import Address Table so sensitive APIs appear as innocuous ones, with runtime shellcode restoring the real addresses. It is aimed at malware research and understanding anti-analysis techniques.

## Use cases
- hide windows api imports from static analysis
- obfuscate pe iat entries
- learn how import table obfuscation works
- malware research tooling
- replace imported symbols in an executable

## When to choose
- you are researching evasion techniques or analyzing obfuscated samples
- you need to demonstrate IAT manipulation in a controlled lab

## When to avoid
- you want to obfuscate software for legitimate protection of production apps
- you need a maintained tool with a license and active support
- you target non-Windows platforms

## Facets
- artifact type: library
- maturity: maintenance
- function: security, reverse-engineering, developer-tools
- domain: security, reverse-engineering, windows
- platform: windows, cpp, cli
- tags: pe-patching, iat-obfuscation, malware-analysis, windows-api, anti-analysis

## Member repositories
- d35ha/CallObfuscator (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:16.416486+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:08:13.485268+00:00, confidence not recorded.
  - readme: https://github.com/d35ha/CallObfuscator (fetched 2026-08-28T04:03:16.416486+00:00, sha d73ef878f73b)
- Data as of 2026-08-30T08:39:29.467469+00:00.