Malleable Portable Executable (PE)

Malleable C2 profiles are more than communication indicators. Malleable C2 profiles also control Beacon’s in-memory characteristics, determine how Beacon does process injection, and influence Cobalt Strike’s post-exploitation jobs too. The sections that follow document these extensions to the Malleable C2 language.