Using Driver Global Injection dll, it can hide DLL modules. You need to determine the process name you want in DllMain

driver program

Tell the driver to inject DLL binary data

Shelcode for Memory Loaded DLL

TODO: Judging Injected Process Name in DLLMain

vs2008-vs2017

wdk7-wdk10

step1: install and start driver program

step2: run Input_dll.exe

avatar

Win7-Win10 x64