If you can allocate memory in a foreign process, I'd guess you could also change the permissions on that memory… So write first, then change to executable.

(VirtualProtectEx looks like it would do that. Never used winapi, not sure.)