Random section PE names

Issues related to VMProtect
Post Reply
vmpvmp
Posts: 24
Joined: Sat Jul 26, 2014 11:15 am

Random section PE names

Post by vmpvmp »

Please consider adding that.
Random PE names helping to prevent cracking tools from identyfying the PE sections.
(searches for common expected names will fail)
It probably also helps to decrease AV false posive detection.
Admin
Site Admin
Posts: 2584
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: Random section PE names

Post by Admin »

Did you check our example from "C:\Users\Public\Documents\VMProtect\Scripts\Random Section Names"?

Code: Select all

function GetRandomSectionName()
	local res = ""
	for i = 1, 8 do
		res = res .. string.char(32 + math.random(string.byte("z") - 32))
	end
	return res
end

function OnAfterSaveFile()
	local file = vmprotect.core():outputArchitecture()
	for i = 1, file:segments():count() do
		segment = file:segments():item(i)
		name = GetRandomSectionName()
		print(string.format("Section \"%s\" is renamed to \"%s\"", segment:name(), name))
		segment:setName(name)
	end
end
vmpvmp
Posts: 24
Joined: Sat Jul 26, 2014 11:15 am

Re: Random section PE names

Post by vmpvmp »

Thx
Post Reply