Protected DLLs cannot be loaded by madCodeHook 4.0

c++ / delphi package - dll injection and api hooking

Protected DLLs cannot be loaded by madCodeHook 4.0

Postby SuperCN » Thu Jun 01, 2017 6:50 am

Hi, madshi.
I'm so happy to know that madCodeHook was updated to 4.0, with some useful improvements. We soon updated madCodeHook in our project, but we met a problem.

Our project was always protected by "Themida" a software protection system. It did well while the program using madCodeHook 3.x.x. However, after we updated madCodeHook to 4.0.2, the protected DLL can not be loaded by the main program(using the function InjectLibrary). If the DLL is not protected by "Themida", the main program can load the DLL successfully.
So we doubt that there are problems to load a protected DLL by madCodeHook 4.0.

We look forward to your help, and thank you very much. :D
SuperCN
 
Posts: 1
Joined: Fri May 27, 2016 5:58 pm

Re: Protected DLLs cannot be loaded by madCodeHook 4.0

Postby iconic » Thu Jun 01, 2017 6:26 pm

Which settings are you using specifically with TheMida on this DLL? Also, are you using any of its code macros? MCH 4.x parses the code signature information, if I had to make an educated guess I'd say TheMida might be throwing this code signature parsing that MCH does off and if a DLL can't be "validated" it will be refused to load

--Iconic
iconic
 
Posts: 807
Joined: Wed Jun 08, 2005 5:08 am


Return to madCodeHook

Who is online

Users browsing this forum: No registered users and 4 guests

cron