Quote:
Originally Posted by deepzero
what exactly are you planning to do?
Your best bet is probably to CreateProcess a dummy process (say, cmd.exe) in a suspended state, then map your own image into the process and continue execution.
It's a common evasion technique in malware.
|
I used same method few years ago to write a cryptor.