Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques.

This script allows you to create various artifacts on a bare-metal Windows computer in an attempt to trick malwares that looks for VM or analysis tools

It is demonstration tool that contains collection techniques to detect the virtualisation environment in Linux Operating System.

Some anti QEMU trick used by in-the-wild malware.

A pintool for protecting a sandbox application of common anti-virtualmachine and anti-sandbox detection techniques

#seccamp 2014 CTF softsec (Reverse 400pt)