Malware development trick - part 36: Enumerate process modules. Simple C++ example

﷽

Hello, cybersecurity enthusiasts and white hackers!

Today, this post is the result of my own research on another popular malware development trick: get list of modules of target process.

Let’s say we created successfully DLL injection to process. How to check if DLL in list of modules of our process?

practical example

First of all, we just use one of the methods to find target process PID. For example I used this one:

typedef NTSTATUS (NTAPI * fNtGetNextProcess)( …

check cybersecurity development dll hackers hello injection list malware malware analysis malware development modules own popular process research result simple target today