ulysse31 Master Cheater
Reputation: 2
Joined: 19 Mar 2015 Posts: 324 Location: Paris
|
Posted: Wed Jan 13, 2016 10:35 am Post subject: Inject code to PE |
|
|
Hi,
When injecting code into a PE articles usually advise to either use what space of the dos stub is available or rather to add a new section and make the corresponding changes in the PE header.
Can someone tell me why this cannot be done using the space between the end of the section table and the first section ? I've tried it this way yersterday and got access error, turns out PE header was on readonly, when I changed the access of the PE header to full the code I inejcted started to execute properly.
I'd like to know how to give the PE header full access (tried the characteristics flag, didn't work) and I'd like to know why isn't this a valid technique for injecting code as creating a new section and doing correspoding changes is tiresome.
Thanks
|
|