When I was in remote loading your CobaltStrike binary file, suggests some error occurred：
未经处理的异常: System.BadImageFormatException: 未能加载文件或程序集“291840 bytes loaded from MemoryLoader, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null”或它的某一个依赖项。试图加载格式不正确的程序。 ---> System.BadImageFormatException: IL 格式不正确。
--- 内部异常堆栈跟踪的结尾 ---
在 System.Reflection.RuntimeAssembly.nLoadImage(Byte[] rawAssembly, Byte[] rawSymbolStore, Evidence evidence, StackCrawlMark& stackMark, Boolean fIntrospection, Boolean fSkipIntegrityCheck, SecurityContextSource securityContextSource)
在 System.Reflection.Assembly.Load(Byte[] rawAssembly)
在 MemoryLoader.MemoryUtils.<>c__DisplayClass0_0.b__0() 位置 D:\MemoryLoader-main\MemoryLoader\Program.cs:行号 118
在 System.Threading.ThreadHelper.ThreadStart_Context(Object state)
在 System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
在 System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
在 System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
在 System.Threading.ThreadHelper.ThreadStart()
When I was in remote loading your CobaltStrike binary file, suggests some error occurred：
未经处理的异常: System.BadImageFormatException: 未能加载文件或程序集“291840 bytes loaded from MemoryLoader, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null”或它的某一个依赖项。试图加载格式不正确的程序。 ---> System.BadImageFormatException: IL 格式不正确。
--- 内部异常堆栈跟踪的结尾 ---
在 System.Reflection.RuntimeAssembly.nLoadImage(Byte[] rawAssembly, Byte[] rawSymbolStore, Evidence evidence, StackCrawlMark& stackMark, Boolean fIntrospection, Boolean fSkipIntegrityCheck, SecurityContextSource securityContextSource)
在 System.Reflection.Assembly.Load(Byte[] rawAssembly)
在 MemoryLoader.MemoryUtils.<>c__DisplayClass0_0.b__0() 位置 D:\MemoryLoader-main\MemoryLoader\Program.cs:行号 118
在 System.Threading.ThreadHelper.ThreadStart_Context(Object state)
在 System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
在 System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
在 System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
在 System.Threading.ThreadHelper.ThreadStart()