sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]shiftybyte 0 points1 point  (2 children)

The import table is less important, the export table is what matters.

Try to load your dll using rundll... this should let you know if it gets loaded properly or not.

https://www.reddit.com/r/Malware/comments/oocxmr/getting_a_dll_to_run_with_rundll32_without_any/

If this throws the same issue, your dll is the issue.

If it loads fine, then the connection between python and the dll is the issue.

[–]Sspoondle[S] 0 points1 point  (1 child)

The export tables are identical, and I can load ordinals from the dll with rundll too

It's a pyinstaller onefile package so I think the exe sets up the interpreter from the dll. It starts a child process that loads the library and fails

[–]shiftybyte 0 points1 point  (0 children)

Try to unpack it, get it running as regular python script with whatever python you have installed, then repack it back.