There is a tool named “Detect It Easy” that can detect VMProtect packer, is there any chance to avoid that?
Download: NTInfo | .:NTInfo:.
You can find the methods to detect VMProtect that this tool uses when download it and click on the “S” button.
You can just rename vmp section. I used only mutation in example and it works fine, no packer detected. Imgur: The magic of the Internet
It’s stupid, because you have 0-1 in sections plus some specific values