|
That was indeed the same question as i did ask a few days ago, but like Crudd already said, it aint that easy to just remove the section name with a PE editor because most packers/protecters do use crc check in the protected files, so when you remove the section name you also have to fix the crc.
Some protectors offer you the option to give their section a blank or another name, but most signature detecting tools dont look to the section name but to an internal signature or code patterns. (if i did understand it right)
|