Mutation: Packer detectors problem

Issues related to VMProtect
Post Reply
fuzzing
Posts: 19
Joined: Fri Aug 07, 2020 2:33 am

Mutation: Packer detectors problem

Post by fuzzing »

There is a tool named "Detect It Easy" that can detect VMProtect packer, is there any chance to avoid that?

Download: http://ntinfo.biz/index.html

You can find the methods to detect VMProtect that this tool uses when download it and click on the "S" button.
a47
Posts: 21
Joined: Tue Mar 27, 2018 10:31 am

Re: Mutation: Packer detectors problem

Post by a47 »

You can just rename vmp section. I used only mutation in example and it works fine, no packer detected. https://imgur.com/a/SbEE3Cz
Master
Posts: 21
Joined: Thu May 12, 2011 9:23 am

Packer detectors problem

Post by Master »

It's stupid, because you have 0-1 in sections plus some specific values
Post Reply