Jump to content
Tuts 4 You

DLL injection on Windows 10


Aldhard Oswine

Recommended Posts

Aldhard Oswine

I'm trying to implement dll injection technique from PMA book.

It works for third-party applications, such as notepad++.exe, chrome.exe, FoxitReader.exe, etc. But don't work for windows applications, such as notepad.exe, explorer.exe, etc.

With third-party app "CreateRemoteThread" returns threadId, with windows app returns 0.


Can you help me to understand what happens?

Link to comment

Let me just quote MSDN:

Quote

If the function fails, the return value is NULL. To get extended error information, call GetLastError.

So, what is the error code? 

Most likely causes: mixing 32 and 64bit processes, protected processes, and/or overly aggressive antivirus. :)

  • Like 2
Link to comment
Aldhard Oswine

Error -  ERROR_INVALID_HANDLE (0x6)

 

You're right, the cause was mixing 32/64bit processes.

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...