Loading DLLs Reflections

This technical write-up explains reflective DLL loading — a technique to load and execute a DLL directly from memory without touching disk — and provides C and C# proof-of-concept implementations, walkthroughs of PE header parsing, relocations, import resolution, and execution of DLLMain. The report discusses attacker advantages (AV evasion, anti-forensics), reversing outcomes, and basic detection suggestions such as monitoring RWX memory allocations and network captures.