I'm trying to make a dLL cloak/helper for DLL's injected into AVA. (UAV,farmer, etc) I attached the DLL cloak with my injector so as I inject it will cloak the DLL hopefully making it undetectable. My problem is that when I inject the DLL my DLL helper won't recognize the DLL automatically. What do I have to do? Is XIGNCODE the issue? Do I have to make a program to disable XIGNCODE first before I try to cloak the DLL so it won't get a 3rd party program error after the cloaking issue is resolved?
This is a part of my code.
Code:
#pragma comment(lib, "advapi32.lib")
#pragma comment(lib, "shlwapi.lib")
#include<windows.h>
#include <stdio.h>
#include <tlhelp32.h>
#include <shlwapi.h>
typedef struct _UNICODE_STRING
{
USHORT Length;
USHORT MaximumLength;
PWSTR Buffer;
} UNICODE_STRING, *PUNICODE_STRING;
typedef struct _LDR_MODULE
{
LIST_ENTRY InLoadOrderModuleList;
LIST_ENTRY InMemoryOrderModuleList;
LIST_ENTRY InInitializationOrderModuleList;
PVOID BaseAddress;
PVOID EntryPoint;
ULONG SizeOfImage;
UNICODE_STRING FullDllName;
UNICODE_STRING BaseDllName;
ULONG Flags;
SHORT LoadCount;
SHORT TlsIndex;
LIST_ENTRY HashTableEntry;
ULONG TimeDateStamp;
} LDR_DATA_ENTRY , *PLDR_DATA_ENTRY;
typedef struct _PEB_LDR_DATA
{
ULONG Length;
BOOLEAN Initialized;
PVOID SsHandle;
LIST_ENTRY InLoadOrderModuleList;
LIST_ENTRY InMemoryOrderModuleList;
LIST_ENTRY InInitializationOrderModuleList;
}