Page 1 of 1
Inject multiple dlls with CreateProcessExW
Posted: Wed Nov 20, 2019 11:19 am
by hardik.choudhary
Hi, as far as I know, createProcessExW allows us to inject a single dll, at the time of process creation. Is there a way to inject multiple dlls with createProcessExW?
Thanks in advance.
Re: Inject multiple dlls with CreateProcessExW
Posted: Wed Nov 20, 2019 1:31 pm
by madshi
All CreateProcessEx does inside is:
1) CreateProcess with CREATE_SUSPENDED.
2) InjectLibrary
3) ResumeThread
You can do the same, but with multiple InjectLibrary calls to inject multiple dlls. The trick here is that creating the process in suspended state (and keeping it that way during injection) allows madCodeHook to use a different injection method.