Posted August 7, 20205 yr Hello, Im trying to reverse malware,but can't remove the protection I think this is KoiVM(names in PE header),but oldrod can't devirtualize it What can I do?help please password:infected Btw,that malware cheks does it run on vm or not vklctukzxyuvdxvcsx.zip
October 15, 20204 yr If its KoiVM then its probably modified,try to modify oldrod devirtualizator made by Washi or at least check its source code.
Create an account or sign in to comment