In following this example code for binary injection:
http://www.security.org.sg/code/loadexe.html
I can get it to work, inject a second exe into the primary exe's memory space and run. The trouble is that the second exe can not access any DLL's in the startup folder.
For example:
c:\1.exe c:\2.exe c:\helper.dll
If 2.exe is injected, it starts then fails because it cannot reference helper.dll. is there something i need to do differently in the relocation?
- The purpose of this experiment is to create a simple DRM example that decrypts the original exe in memory.