> For the complete documentation index, see [llms.txt](https://ppn.snovvcra.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ppn.snovvcra.sh/red-team/dev/api-hashing.md).

# API Hashing

* <https://www.ired.team/offensive-security/defense-evasion/windows-api-hashing-in-malware>
* <https://www.huntress.com/blog/hackers-no-hashing-randomizing-api-hashes-to-evade-cobalt-strike-shellcode-detection>

## Examples

* <https://github.com/helpsystems/nanodump/blob/main/scripts/randomize_sw2_seed.py>