NtCreateSection Query

  • Hi all !

    Can any one tell me or help in to understand the NtCreateSection() parameters , the third argument of it’s “ObjectAttributes” which means Pointer to OBJECT_ATTRIBUTES structure contains section name, in Object Namespace format.
    But when I saw this argument value in Stack , it was simply “18”, so I m asking you how can I get specific address or say where I can see the “OBJECT_ATTRIBUTES structure”


  • Hi All

    Kindly response ?

Log in to reply

Looks like your connection to Malware Analysis Forums was lost, please wait while we try to reconnect.