Benign windows Download

apc.c

Dynamic library load in sourceGet module handle

SHA-2563ddba883067c7d602a15f656e2bec5e3170fc029f51bc8f1efc53072103dbea5

Evidence

Get module handle lines 20–22

20BOOL InitNtFunctions(void) {
21	HMODULE ntdll = GetModuleHandleA("ntdll.dll");
22	if (!ntdll) return FALSE;

Dynamic library load in source lines 48–52

48BOOL NtAPCinject(IN HANDLE hThread, IN PVOID pAddress) {
NTSTATUS status = NtQueueApcThread(hThread,
(PPS_APC_ROUTINE)pAddress, NULL, // ApcArgument1 (0 for LoadLibrary path in RCX)
NULL, NULL);
if (status != STATUS_SUCCESS) { printf("NtQueueApcThread failed. Status: 0x%08X\n", status); return FALSE; }