NtCreateSection Query



  • Hi all !

    Can any one tell me or help in to understand the NtCreateSection() parameters , the third argument of it’s “ObjectAttributes” which means Pointer to OBJECT_ATTRIBUTES structure contains section name, in Object Namespace format.
    But when I saw this argument value in Stack , it was simply “18”, so I m asking you how can I get specific address or say where I can see the “OBJECT_ATTRIBUTES structure”

    Thanks
    Rohit



  • Hi All

    Kindly response ?


Log in to reply
 

Looks like your connection to Malware Analysis Forums was lost, please wait while we try to reconnect.