MalAPI.io
Contribute
FAQ
Other
Living Off Trusted Sites
Filesec.io
Security Blog
Function Name
GetProcAddress
Description
GetProcAddress is used to get the memory address of a function in a DLL. This is often used by malware for obfuscation and evasion purposes to avoid having to call the function directly.
Library
Kernel32.dll
Associated Attacks
Injection
Evasion
Documentation
https://docs.microsoft.com/en-us/windows/win32/api/libloaderapi/nf-libloaderapi-getprocaddress
Created: 2021-10-30
Last Update: 2021-10-30
Credits: mr.d0x