Repository for API Hashing script detailed in the Huntress Blog
![](https://www.deeplearningdaily.com/wp-content/uploads/2022/03/repository-for-api-hashing-script-detailed-in-the-huntress-blog_621e99758bee2-375x210.jpeg)
This repository hosts the hashing replacement script and yara rule detailed in the huntress blog.
https://www.huntress.com/blog/hackers-no-hashing-randomizing-api-hashes-to-evade-cobalt-strike-shellcode-detection
To use the script simply run
python apihashreplace.py <32 or 64>
Eg
python apihashreplace.py 32 shellcode.bin
GitHub