Page cover

🌀Network Information API's

List of Network API's used by Malware Dude :)

  • GetAdaptersInfo: Retrieves information about the network adapters on the local system, including IP addresses, MAC addresses, and network interface statistics.

  • GetNetworkParams: Provides information about network configuration parameters, such as the DNS suffix and the list of DNS servers.

  • GetHostByName: Resolves a hostname to an IP address, often used for connecting to remote servers.

  • GetHostByAddr: Resolves an IP address to a hostname, which can be used to identify remote hosts.

  • WSAEnumInterfaces: Lists all network interfaces on the system, including details about each interface's status and configuration.

  • WSAGetLastError: Retrieves the error code for the last network-related operation, useful for troubleshooting network communications.

  • InternetOpen: Opens a handle to the WinINet library, allowing applications to make network requests, such as connecting to HTTP or FTP servers.

  • InternetOpenUrl: Opens a URL and retrieves data from a specified address, often used by malware to download additional payloads or exfiltrate data.

  • Socket: Creates a network socket, allowing malware to establish connections over the network.

  • Connect: Connects a socket to a specified address and port, enabling communication with remote servers.

  • Recv and Send: Receive and send data over a network socket, used to transfer information between the malware and remote servers.

  • GetAdaptersAddresses: Retrieves detailed information about the network interfaces, including IP addresses and other network configuration details.

  • GetNetworkParams: Provides information about the network configuration parameters, such as the list of DNS servers.

  • DnsQuery: Performs DNS queries to resolve domain names to IP addresses, often used by malware to contact command-and-control servers.

Last updated