Does VMProtect defeat signature scanning?
Posted: Sat Dec 10, 2016 11:52 pm
Hi there,
I was wondering - does VMProtect mutation defeat signature scanning? For example if an attacker was trying to signature scan for a function in my program in order to JMP hook it, would the VMProtect mutation enable the function to generate a different unique signature with every build?
I was wondering - does VMProtect mutation defeat signature scanning? For example if an attacker was trying to signature scan for a function in my program in order to JMP hook it, would the VMProtect mutation enable the function to generate a different unique signature with every build?