SuspendThread

From aldeid
Jump to navigation Jump to search

Description

Suspends a thread so that it stops running. Malware will sometimes suspend a thread in order to modify it by performing code injection.

Note
The EBX register of a suspended newly created process always contains a pointer to the PEB data structure.
Retrieved from "https://www.aldeid.com/w/index.php?title=SuspendThread&oldid=28061"