Page 1 of 1

Mutation: Packer detectors problem

Posted: Fri Aug 07, 2020 3:52 am
by fuzzing
There is a tool named "Detect It Easy" that can detect VMProtect packer, is there any chance to avoid that?

Download: http://ntinfo.biz/index.html

You can find the methods to detect VMProtect that this tool uses when download it and click on the "S" button.

Re: Mutation: Packer detectors problem

Posted: Sun Aug 09, 2020 12:15 pm
by a47
You can just rename vmp section. I used only mutation in example and it works fine, no packer detected. https://imgur.com/a/SbEE3Cz

Packer detectors problem

Posted: Tue Aug 11, 2020 6:38 pm
by Master
It's stupid, because you have 0-1 in sections plus some specific values