NtCreateSection
Read documentation
Through official Microsoft Developer Network (MSDN).
Featured in Techniques
| Technique Name | Technique ID's | Snippet(s) | Rules(s) | OS |
|---|---|---|---|---|
| APC injection | U1221 E1055.004 | |||
| Process Doppelgänging | U1215 | |||
| Process Herpaderping | U1231 |
Matching Samples 10 most recent
| Sample Name | Matching Techniques | First Seen | Last Seen |
|---|---|---|---|
| shellcode.exe | 6 | 2025-09-21 | 1 month, 4 weeks ago |
| preloader_s.dll | 6 | 2025-08-12 | 3 months, 1 week ago |