NtCreateSection
Read documentation
Through official Microsoft Developer Network (MSDN).
Featured in Techniques
| Technique Name | Technique ID's | Snippet(s) | Rules(s) | OS |
|---|---|---|---|---|
| APC injection | U1221 E1055.004 | |||
| Process Doppelgänging | U1215 | |||
| Process Herpaderping | U1231 |
Matching Samples 10 most recent
| Sample Name | Matching Techniques | First Seen | Last Seen |
|---|---|---|---|
| shellcode.exe | 6 | 2025-09-21 | 1 month, 1 week ago |
| preloader_s.dll | 6 | 2025-08-12 | 2 months, 2 weeks ago |