MalAPI.io
Contribute
FAQ
Other
Living Off Trusted Sites
Filesec.io
Security Blog
Function Name
Wow64SetThreadContext
Description
Wow64SetThreadContext is used to set the context for the specified thread. This function can be used by malware as part of a process hollowing attack.
Library
Kernel32.dll
Associated Attacks
Injection
Documentation
https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-setthreadcontext
Created: 2021-11-02
Last Update: 2021-11-02
Credits: @TalenceSecurity