VirtualAlloc

Read documentation

Through official Microsoft Developer Network (MSDN).

Featured in Techniques

Technique Name	Technique ID's	Snippet(s)	Rules(s)	OS
NtQueryObject	U0118 B0001.013
Process Hollowing, RunPE	U1225 E1055.012
DLL Injection via CreateRemoteThread and LoadLibrary	U1226 E1055.001
Guard Pages	U0102 B0006.006
Reflective DLL injection	U1224
APC injection	U1221 E1055.004
Extra Window Memory Injection	U1219 E1055.011
PE Injection	U1216 E1055.002
NOP Sled	U0206
ConsoleWindowClass	U1209
Treepoline	U1208
Listplanting	U1207
OLEUM	U1206
EditWordBreakProc	U1229
WordWarping	U1204
CLIPBRDWNDCLASS	U1203
DNS API Injection	U1202
Breaking BaDDEr	U1201
File Melt	U1007
Access Token Manipulation: Parent PID Spoofing	U1234 T1134.004
ProcEnvInjection - Remote code injection by abusing process environment strings	U1235
Shellcode Injection via CreateThreadpoolWait	U1236
NLS Code Injection Through Registry	U1237
Tamper DLL Export Names & GetProcAddress Spoofing	U1241
Dirty Vanity	U1242
FuncIn	U0132 U0221 U0308

Sample Name	Matching Techniques	First Seen	Last Seen
MBSetup (3).exe	6	2025-10-18	1 week, 1 day ago
Torture.exe	9	2025-12-16	1 week, 4 days ago
efak.exe	6	2025-12-13	1 week, 6 days ago
cmd.exe	7	2025-12-10	2 weeks, 3 days ago
ConsoleApplication2.exe	5	2025-11-27	1 month ago
ekrn.exe	5	2025-11-19	1 month, 1 week ago
steamcmd.exe	5	2025-11-02	1 month, 3 weeks ago
frostygoop.exe	7	2025-10-24	2 months ago
Lightshot.exe	10	2025-10-24	2 months ago
Audition.exe	2	2025-10-14	2 months, 1 week ago