3 ms·
Well, most AVs just check icon + some data like sections, import table and only sometimes put some signatures on code. By using packer(not hard to find one) you
by slezyr 9y ago
Well, most AVs just check icon + some data like sections, import table and only sometimes put some signatures on code. By using packer(not hard to find one) you can make almost any executable undetectable.
- ComputerGuru 9y agoWhich is why most av products will flag any upx or mpress binary as "Trojan unknown" etc. They mostly use a whitelist approach to work around that. Ask me how I know sometime.