How do I fix error with invoke-reflectivepeinjection

See more:

PowerShell

script

Im trying to embed an exe on a powershell script as described on https://truesecdev.wordpress.com/2016/03/15/embedding-exe-files-into-powershell-scripts/

and to the script https://github.com/PowerShellMafia/PowerSploit/blob/master/CodeExecution/Invoke-ReflectivePEInjection.ps1

I have added

# Your base64 encoded binary

$InputString = '...........' with the exe converted to base64

and have also included

# Convert base64 string to byte array

$PEBytes = [System.Convert]::FromBase64String($InputString)

# Run EXE in memory

Invoke-ReflectivePEInjection -PEBytes $PEBytes


but Im getting this cascade of errors

however the first that I get is


Exception calling "GetMethod" with "1" argument(s): "Ambiguous match found."
At C:\users\ieuser\desktop\PowerSploit-master\CodeExecution\Invoke-ReflectivePEInjection2.ps1:1007 char:6
+ $GetProcAddress = $UnsafeNativeMethods.GetMethod('GetProcAddr ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : AmbiguousMatchException

What I have tried:

I have tried as admin

and have tried theses changes


replacing $UnsafeNativeMethods.GetMethod('GetProcAddress'}) on the line referenced by the error with $UnsafeNativeMethods.GetMethods().Where({$_.Name -eq 'GetProcAddress'}) |Select -First 1

made a change to

$GetProcAddress = $UnsafeNativeMethods.GetMethod('GetProcAddress',
[type[]]('IntPtr', 'System.String'))

and

$GetProcAddress = $UnsafeNativeMethods.GetMethod('GetProcAddress',
[type[]]('System.Runtime.InteropServices.HandleRef', 'System.String'))


also tried the suggestions from

https://github.com/PowerShellMafia/PowerSploit/issues/335
https://github.com/PowerShellMafia/PowerSploit/issues/293
https://github.com/PowerShellMafia/PowerSploit/pull/289



But nothing seems to work


What can be the reason for these errors and how can I fix them

The exe file that I used as example was putty (for some reason every time I see a youtube video its the program used as example)