Jump to content
Tuts 4 You
Sign in to follow this  
Vitor Sousa

Malware packed with vmprotect

Recommended Posts

Vitor Sousa

Hi guys,

Sorry to disturb you, but I´m trying to analyze a sample that is protected with vmprotect. I tried most of the tutorials, but no good. I reach the API  Virtual Protect, and the change of the section vmp0 to writable/executable, but then i can´t figure out what to do next...! He stands only in the section vmp0 and do not advance to other.  Can you please help me?

 

 

data.docx

Share this post


Link to post
Vitor Sousa

I figure out..! bypass API GetSystemFirmwareTable function 🙂

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  
×
×
  • Create New...