Recomposer
Randomly modifies Win32/64 PE files to change their hashes for safer uploading to malware analysis sites.
What is Recomposer?
Recomposer is a Python tool that randomly modifies Win32/64 Portable Executable (PE) files to change their cryptographic hashes while preserving functionality. It solves the problem of malware analysts and security researchers needing to upload samples to services like VirusTotal without exposing trackable file hashes that could alert malware authors or be searched publicly.
Malware analysts, security researchers, and reverse engineers who need to submit Windows executable samples to analysis services while maintaining operational security and avoiding hash-based tracking.
Developers choose Recomposer because it provides a simple, automated way to modify PE files just enough to change their hashes without breaking functionality, with tested zero hash collisions across thousands of samples and support for both automated and manual editing modes.
Overview
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
Use Cases
Best For
- Uploading malware samples to VirusTotal without exposing original hashes
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
