I'm currently using this method to download the dll:
I commented out the hidden parts so i can easily see what is being downloaded, and it's only 1kb, better yet 841 bytes. Better yet when i edit the dll with notepad++ this is what i get??
pastebin.com/5P6heLg1
Code
dll = "(exact link to my dll, i can click it and it will directly download it)" ' Main buildCode
Private Sub Inject()
My.Computer.Network.DownloadFile(dll, "C:\temp\Loader\dll\" + filename)
'Dim ToHideDir As New System.IO.DirectoryInfo("C:\temp\Loader\dll")
'ToHideDir.Attributes = IO.FileAttributes.Hidden
My.Computer.FileSystem.WriteAllText("c:\temp\Loader\Nova.Hook.DLLname", filename, False)
Timer1.Stop()
Dim TargetProcess As Process() = Process.GetProcessesByName(TextBox1.Text)
TargetProcessHandle = OpenProcess(PROCESS_CREATE_THREAD Or PROCESS_VM_OPERATION Or PROCESS_VM_WRITE, False, TargetProcess(0).Id)
pszLibFileRemote = "C:\temp\Loader\dll\" + filename
pfnStartAddr = GetProcAddress(GetModuleHandle("Kernel32"), "LoadLibraryA")
TargetBufferSize = 1 + Len(pszLibFileRemote)
Dim Rtn As Integer
Dim LoadLibParamAdr As Integer
LoadLibParamAdr = VirtualAllocEx(TargetProcessHandle, 0, TargetBufferSize, MEM_COMMIT, PAGE_READWRITE)
Rtn = WriteProcessMemory(TargetProcessHandle, LoadLibParamAdr, pszLibFileRemote, TargetBufferSize, 0)
CreateRemoteThread(TargetProcessHandle, 0, 0, pfnStartAddr, LoadLibParamAdr, 0, 0)
CloseHandle(TargetProcessHandle)
Me.Show()
'Dim ToHideDll As New System.IO.FileInfo("C:\temp\Loader\dll\" + filename)
'ToHideDll.Attributes = IO.FileAttributes.Hidden
Form3.Show()
Me.Close()
End SubI commented out the hidden parts so i can easily see what is being downloaded, and it's only 1kb, better yet 841 bytes. Better yet when i edit the dll with notepad++ this is what i get??
pastebin.com/5P6heLg1

