Search

Login

Become a leader in the IoT community!

Join our community of embedded and IoT practitioners to contribute experience, learn new skills and collaborate with other developers with complementary skillsets.

Step 1 of 5

CREATE YOUR PROFILE *Required

OR
Step 2 of 5

WHAT BRINGS YOU TO DEVHEADS? *Choose 1 or more

Connect & collaborate 🤝with other tech professionals
Learn & Grow 📚
Contribute Experience & Expertise 🔧
Step 3 of 5

WHAT'S YOUR INTEREST OR EXPERTISE? *Choose 1 or more

Hardware Design 💡
Embedded Software 💻
Edge Networking ⚡
Step 4 of 5

Personalize your profile

Step 5 of 5

Read & agree to our COMMUNITY RULES

  1. We want this server to be a welcoming space! Treat everyone with respect. Absolutely no harassment, witch hunting, sexism, racism, or hate speech will be tolerated.
  2. If you see something against the rules or something that makes you feel unsafe, let staff know by messaging @admin in the "support-tickets" tab in the Live DevChat menu.
  3. No age-restricted, obscene or NSFW content. This includes text, images, or links featuring nudity, sex, hard violence, or other graphically disturbing content.
  4. No spam. This includes DMing fellow members.
  5. You must be over the age of 18 years old to participate in our community.
  6. You agree to our Terms of Service (https://www.devheads.io/terms-of-service/) and Privacy Policy (https://www.devheads.io/privacy-policy)
By clicking "Finish", you have read and agreed to the our Terms of Service and Privacy Policy.

How to Resolve ERROR_NOACCESS (0x3E6) When Injecting Assembly Code into a PE File Using CreateThread

I encountered an issue when injecting my assembly program **asm.txt** into a **portable executable file** to run a keylogger using `CreateThread`. `CreateThread` was failing with the error code `0x3E6 (ERROR_NOACCESS)`.
I’ve been suspecting it could be stack issues, memory protection issue, or me passing the wrong parameters to `CreateThread`, but I haven’t been able to pinpoint the exact cause.
Where is the error in my assembly code? How can I resolve the `ERROR_NOACCESS` error and successfully create the thread to run my keylogger in the injected PE file?

  1. heidi.tech#0
    December 17, 2024 at 10:03 am

    struct_def.txtstring_def.txtasm.txt

  2. Renuel Roberts#0000
    December 17, 2024 at 10:03 am

    @marveeamasi The `ERROR_NOACCESS (0x3E6)` error in your `CreateThread` call is likely due to `memory access` or parameter issues. Ensure the `memory` where your `injected code` resides has proper `permissions` using `VirtualProtect` (`PAGE_EXECUTE_READWRITE`). Also, verify that the `stack` is `16-byte` aligned before calling `CreateThread`, and `re-check` that the parameters you’re passing are correct. If you’re injecting code into another process, make sure it allows execution of injected threads, and consider security features like DEP and ASLR that may need to be addressed.

  3. Marvee Amasi#0000
    December 17, 2024 at 10:03 am

    I guess I am even complicating things the more . I need to calm down, and take my time to verify , altho I am under pressure doing this task

  4. Renuel Roberts#0000
    December 17, 2024 at 10:03 am

    Yea coding might be more tasking at times and even cause severe headaches, that’s y u never 4get ur coffee ☕

  5. Marvee Amasi#0000
    December 17, 2024 at 10:03 am

    So after further debugging, I found that I hadn’t correctly initialized the stack. Once I added the following initialization to the code, the keylogger started working correctly:

    mov qword[rsp+20h], 0
lea rbx, [ThreadId]
mov qword[rsp+28h], rbx
lea r9, [Par]
lea r8, [KL]
xor rdx, rdx
lea rcx, [SECURITY_ATTRIBUTES_]
call rax

    With this fix, the keylogger now works perfectly. Thanks for the help @enthernetcode

CONTRIBUTE TO THIS THREAD

Browse other Product Reviews tagged 

or  Ask Your Own Question?

Differences Between Classic ARM and ARM Cortex

Troubleshooting LoRa Communication between Arduino and Raspberry Pi

Building an 8-bit Analog Computer

Handling Multiple I2C Slaves on ATTiny1616

RELATED THREADS
Upcoming Events

9

May

Using Nix for Better Builds

9

May

Using Nix for Better Builds

Leaderboard

RANKED BY XP

All time
  • 1.
    Avatar
    @Nayel115
    1620 XP
  • 2.
    Avatar
    @UcGee
    650 XP
  • 3.
    Avatar
    @melta101
    600 XP
  • 4.
    Avatar
    @chitour
    600 XP
  • 5.
    Avatar
    @lifegochi
    250 XP
  • 6.
    Avatar
    @Youuce
    180 XP

Differences Between Classic ARM and ARM Cortex

Troubleshooting LoRa Communication between Arduino and Raspberry Pi

Building an 8-bit Analog Computer

Handling Multiple I2C Slaves on ATTiny1616