Executing an EXE from memory
-
I would like to execute an EXE from memory (instead of disk). Is this practical? If so, does anyone have any hints or suggestions as to how it can be accomplished?
-
I would like to execute an EXE from memory (instead of disk). Is this practical? If so, does anyone have any hints or suggestions as to how it can be accomplished?
Yes. Search MSDN and the Net for the PE file format.
Five birds are sitting on a fence. Three of them decide to fly off. How many are left?
-
Yes. Search MSDN and the Net for the PE file format.
Five birds are sitting on a fence. Three of them decide to fly off. How many are left?
I undoubtably have horrible MSDN searching skills, however the most I gleaned from a massive article with way too much information I'm not interested in was: "When PE files are loaded into memory via the Windows loader"... bla bla bla. I'm just wondering if there is some relatively easy way (in the Win32/C++ world) to launch a PE from memory (instead of disk)? From disk we have lots of API's... WinExec, CreateProcess, ShellExecute, etc. What's the basic technique for launching from memory? Is assembly required? :confused: I'm just basically looking for a tidbit of information to give me a headstart -- before having to comprehend all of the information about PE files and apparently the Windows loader and such.
-
I would like to execute an EXE from memory (instead of disk). Is this practical? If so, does anyone have any hints or suggestions as to how it can be accomplished?
Larry Antram wrote: I would like to execute an EXE from memory No, because the PE loader uses memory-mapped files to move the EXE image into memory. This requires that the EXE be a real file on disk. --Mike-- Ericahist | Homepage | RightClick-Encrypt | 1ClickPicGrabber CP SearchBar v2.0.2 released