Malware Analysis : RtlMoveMemory function and its usage.

Note : This is the continuation to my previous post on VirtualAlloc function, click here to refer.
RtlMoveMemory function copies the contents of the payload to the destination memory block/buffer.
The syntax of the function is,
VOID RtlMoveMemory(
  _Out_       VOID UNALIGNED *Destination,
  _In_  const VOID UNALIGNED *Source,
  _In_        SIZE_T         Length
);

Destination : To where to copy the payload.
Source : From where to copy the payload.
Length : Size of the payload.

Example :
char payload[] ={0x...

 •  0 comments  •  flag
Share on Twitter
Published on March 14, 2022 08:08
No comments have been added yet.