https://github.com/print3m/anti-vm

Windows-based implementation of several anti-vm techniques used in malware development.
https://github.com/print3m/anti-vm

anti-virtualization anti-vm cpp malware-development winapi

Last synced: about 2 months ago
JSON representation

Windows-based implementation of several anti-vm techniques used in malware development.

• Host: GitHub
• URL: https://github.com/print3m/anti-vm
• Owner: Print3M
• Created: 2023-09-15T20:07:48.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2023-09-15T20:09:18.000Z (over 1 year ago)
• Last Synced: 2023-09-16T12:28:21.143Z (over 1 year ago)
• Topics: anti-virtualization, anti-vm, cpp, malware-development, winapi
• Language: C++
• Homepage:
• Size: 4.88 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Anti-VM techniques

Basic implementation of several anti-vm techniques (Windows) for educational purpose. They rely on checking different parts of OS and hardware to find out if the script is running in a VM.

## Implemented techniques

- [x] CPU hypervisor bit (CPUID)

- [x] CPU id string (CPUID)

- [x] CPU brand string (CPUID)

- [x] BIOS manufacturer string

- [X] BIOS version string

- [x] Screen resolution

- [x] Amount of physical memory

- [x] Number of CPU cores

- [x] Amount of disk space

## To be implemented

- [ ] Global Descriptor Table location

- [ ] Local Descriptor Table location

- [ ] Interrupt Descriptor Table location

- [ ] ACPI VM-based string checks

- [ ] VM-based hostnames and usernames

- [ ] VM-based MAC addresses