Page 1 of 1
Random section PE names
Posted: Fri Apr 12, 2019 7:40 pm
by vmpvmp
Please consider adding that.
Random PE names helping to prevent cracking tools from identyfying the PE sections.
(searches for common expected names will fail)
It probably also helps to decrease AV false posive detection.
Re: Random section PE names
Posted: Sat Apr 13, 2019 5:00 am
by Admin
Did you check our example from "C:\Users\Public\Documents\VMProtect\Scripts\Random Section Names"?
Code: Select all
function GetRandomSectionName()
local res = ""
for i = 1, 8 do
res = res .. string.char(32 + math.random(string.byte("z") - 32))
end
return res
end
function OnAfterSaveFile()
local file = vmprotect.core():outputArchitecture()
for i = 1, file:segments():count() do
segment = file:segments():item(i)
name = GetRandomSectionName()
print(string.format("Section \"%s\" is renamed to \"%s\"", segment:name(), name))
segment:setName(name)
end
end
Re: Random section PE names
Posted: Sat Apr 13, 2019 10:38 am
by vmpvmp
Thx