PDA

Click to See Complete Forum and Search --> : Executing a mapped file in memory

larcher
October 26th, 2008, 10:38 AM
Does anyone know how to execute a file in memory? It has been mapped with MapVIewofFile now I want it to be executed not with ShellExecute or something similar, but in memory.
Igor Vartanov
October 31st, 2008, 08:45 AM
Nope. To be run by loader the executable must be a file, but not memory mapping.
fred100
November 2nd, 2008, 05:31 AM
Nope. To be run by loader the executable must be a file, but not memory mapping.

No.
Of course, you can execute a PE image from memory.
Search on MSDN and Google Groups to learn how to use ReadProcessMemory()...
Igor Vartanov
November 3rd, 2008, 05:42 AM
Of course, you can execute a PE image from memory.Well, I would not be so confident about "of course". Yeah, I heard about Garry Nebbet's suggestion to replace the PE mapped view on the fly while loading, but this is not the thing I would recommend to beginners. Besides, it was true for W2k, but I never heard about going farther. So, the answer still remains "no, it's not possible", of course until you Fred kindly point us at the link to article that disproves the point. ;)