Beacon Object File (BOF)

Supported BOF API Proxy

• VirtualAlloc

• VirtualAllocEx

• WriteProcessMemory

• ReadProcessMemory

• LoadLibraryA

• VirtualProtect

• VirtualProtectEx

• NtSetContextThread

• SetThreadContext

• NtGetContextThread

• GetThreadContext

• CLRCreateInstance

• CoInitialize

• CoInitializeEx

Supported Beacon API

• BeaconDataParse

• BeaconDataInt

• BeaconDataExtract

• BeaconDataShort

• BeaconDataLength

• BeaconOutput

• BeaconPrintf

• BeaconAddValue

• BeaconGetValue

• BeaconRemoveValue

• BeaconVirtualAlloc

• BeaconVirtualProtect

• BeaconVirtualAllocEx

• BeaconVirtualProtectEx

• BeaconIsAdmin

• BeaconUseToken

• BeaconRevertToken

• BeaconOpenProcess

• BeaconOpenThread

• BeaconFormatAlloc

• BeaconFormatAppend

• BeaconFormatFree

• BeaconFormatInt

• BeaconFormatPrintf

• BeaconFormatReset

• BeaconFormatToString

• BeaconWriteAPC

• BeaconDripAlloc

• BeaconGetSpawnTo