Skip to content

Latest commit

 

History

History
38 lines (32 loc) · 775 Bytes

heap-spray.md

File metadata and controls

38 lines (32 loc) · 775 Bytes
ID C0006
Objective(s) Memory
Related ATT&CK Techniques None
Version 2.1
Created 14 August 2020
Last Modified 5 December 2023

Heap Spray

Malware may use heap spraying to write a sequence of bytes on the heap section of a process.

Detection

Tool: CAPE Class Mapping APIs
exploit_heapspray ExploitHeapspray Heap Spray (C0006) NtAllocateVirtualMemory