How to run an exe file from buffer (data) in RAM?

Question

1.00/5 (1 vote)

See more:

In the name of allah

have a good time

I'm working on a project and now i need help.

At first you look that am i understood a matter?
In the windows When we double click on a file (for example exe) the operation system will load the file's buffer (array of characters stored in the file) to RAM and then run it.
Now i want to do this.
In fact i'm going to load buffer of file in run time in the string variable(array of char) then delete the file and finally execute the file from buffer so that there is no more file in hard.

What I have tried:

I searched about portable exe and run from buffer,but i couldn't find code or got a code just for .net exe for csharp and basic.

Can you explain for me what's the solution?

Thanks in advance

Posted 1-Jul-16 17:11pm

Mahdi Nejadsahebi

Updated 1-Jul-16 21:43pm

Add a Solution

Comments

[no name] 2-Jul-16 0:37am

Why do you need to do this? The OS provides a SECURE way of running an application. Bypassing this is always malicious.

Mahdi Nejadsahebi 2-Jul-16 8:37am

Well
I want to write an application like winrar but at here there a different, we put some files in a package like .rar and then open this archive by winrar, now we double click on a file, what happens? A file will extracted to hard disk then runs.
i need to do this but i don't want create any file ondisk(cause of security).

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Richard MacCutchan · Answer 1 · 2016-07-01T21:43:00

Solution 1

Without writing a complet PE loader and address relocator you cannot do it. See LoadLibraryEx function (Windows)[^].

Posted 1-Jul-16 21:43pm

Richard MacCutchan

Updated 1-Jul-16 21:44pm

v2

Comments

Mahdi Nejadsahebi 19-Jul-16 3:34am

thanks dear pal for your solution