4 ms·
Loading a DLL from Memory (2010)
- blacksqr 5y agoCode from above article at: https://github.com/fancycode/MemoryModule https://github.com/fancycode/MemoryModule Last update 2019.
- no_time 5y agoReally cool hack. Though I have a feeling that this will trigger every heuristic AV in existence.
- stuckkeys 5y agoNot necessarily true. You can establish read information only. Every dll has its intended purpose. You can inject into an existing kernel and not trip the signature modification using obfuscation.
- no_time 5y ago>You can inject into an existing kernel and not trip the signature modification using obfuscation Sounds awfully close to what malware does lol.
- rurban 5y agoSince this is just an ordinary PE-COFF loader, he should have chosen a proper name, not MemoryModule.