-
Notifications
You must be signed in to change notification settings - Fork 28
Open
Description
I used the sRID project you modified to generate an x64 payload, and then I used the following code to run it, which caused a crash. The 32-bit test was successful.
BYTE* ttt = (BYTE*)VirtualAlloc(NULL, dwfilesize + 500 * 1024 + 1024 * 1024, MEM_RESERVE | MEM_COMMIT, PAGE_EXECUTE_READWRITE);
memset(ttt, 0, dwfilesize + 500 * 1024 + 1024 * 1024);
RtlMoveMemory(ttt, fileContent, dwfilesize);
typedef UINT_PTR(WINAPI* RDI)();
RDI rdi = (RDI)(ttt);
HMODULE baseAddress = (HMODULE)rdi(); // Excute DLL
Metadata
Metadata
Assignees
Labels
No labels