# IATelligence Import Address Table (IAT) from a PE&#x20;

IATelligence Import Address Table (IAT) from a PE file&#x20;

IATelligence is a Python script that extracts the Import Address Table (IAT) from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT\&CK techniques and explains how the API could potentially be used by attackers.

It also displays the hashes of the file and estimates the cost of the GPT-3 requests. IATelligence is a proof of concept for using GPT-3 for malware analysis and quickly assessing the behavior of a malware based on its IAT.

Below is a quick example of the result you'll get. Notice that the request can take longer depending of the size of the IAT.

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FiHcgJwJMbOsvYFnpKxeg%2Fimage.png?alt=media&#x26;token=a24d16b8-a42c-427b-9543-5f7eae2f8533" alt=""><figcaption></figcaption></figure>

Download

{% embed url="https://github.com/fr0gger/IATelligence" %}
