Execution Options

Fibers

1. Convert Main Thread to Fiber
2. Write Payload to Memory
3. Create New Fiber that points to Payload Address
4. Schedule the new fiber
5. Fiber gets scheduled and payload executes

CreateThreadPoolWait

1. Create Event with Signaled State
2. Write Payload to Memory
3. CreateThreadPoolWait creates a wait object
4. SetThreadpoolWait sets wait object to wait
5. WaitForSingleObject waits for the wait object to become Signaled

WORK IN PROGRESS

Injection

LocalThread

LocalThreadHijack (CreateThread)

LocalThreadHijack (EnumThread)

APC Inject