Posted May 22, 20178 yr I'm trying to implement dll injection technique from PMA book. It works for third-party applications, such as notepad++.exe, chrome.exe, FoxitReader.exe, etc. But don't work for windows applications, such as notepad.exe, explorer.exe, etc. With third-party app "CreateRemoteThread" returns threadId, with windows app returns 0. Can you help me to understand what happens?
May 22, 20178 yr Let me just quote MSDN: Quote If the function fails, the return value is NULL. To get extended error information, call GetLastError. So, what is the error code? Most likely causes: mixing 32 and 64bit processes, protected processes, and/or overly aggressive antivirus.
May 22, 20178 yr Author Error - ERROR_INVALID_HANDLE (0x6) You're right, the cause was mixing 32/64bit processes.
Create an account or sign in to comment