From be6ac618c209443c6a28d7058ccda813ac5c96d8 Mon Sep 17 00:00:00 2001 From: zeffy Date: Sat, 1 Jul 2017 04:45:20 -0700 Subject: [PATCH] hmm --- wufuc/rundll32.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wufuc/rundll32.c b/wufuc/rundll32.c index 803d79e..160a59d 100644 --- a/wufuc/rundll32.c +++ b/wufuc/rundll32.c @@ -59,7 +59,7 @@ void CALLBACK Rundll32Entry(HWND hwnd, HINSTANCE hinst, LPSTR lpszCmdLine, int n return; } LPVOID lpBaseAddress = VirtualAllocEx(hProcess, NULL, sizeof(lpLibFileName), MEM_RESERVE | MEM_COMMIT, PAGE_READWRITE); - if (lpBaseAddress && WriteProcessMemory(hProcess, lpBaseAddress, lpLibFileName, _countof(lpLibFileName), NULL)) { + if (lpBaseAddress && WriteProcessMemory(hProcess, lpBaseAddress, lpLibFileName, sizeof(lpLibFileName), NULL)) { HANDLE hThread = CreateRemoteThread(hProcess, NULL, 0, (LPTHREAD_START_ROUTINE)GetProcAddress(GetModuleHandle(L"kernel32.dll"),