MalAPI.io
Contribute
FAQ
Other
Living Off Trusted Sites
Filesec.io
Security Blog
Function Name
CreateFileMappingA
Description
CreateFileMappingA creates a handle to a file mapping that loads a file into memory and makes it accessible via memory addresses. Launchers, loaders, and injectors use this function to read and modify PE files.
Library
Kernel32.dll
Associated Attacks
Injection
Evasion
Documentation
https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-createfilemappinga
Created: 2021-10-30
Last Update: 2021-10-30
Credits: mr.d0x