MemoryModule icon indicating copy to clipboard operation
MemoryModule copied to clipboard
verified publisher icon fancycode

BUG in FinalizeSection

Open vmpsoft opened this issue 2 years ago • 0 comments

Windows doesn't strip sections with IMAGE_SCN_MEM_DISCARDABLE from the image in the user mode: https://github.com/fancycode/MemoryModule/blob/5f83e41c3a3e7c6e8284a5c1afa5a38790809461/MemoryModule.c#L273

So these sections have wrong access for EXE/DLL files.

vmpsoft avatar Oct 20 '23 09:10 vmpsoft