Anti VM 기법

VirtualBox

• http://pastebin.com/RU6A2UuB (9 different methods, registry, dropped VBOX dlls, pipe names etc)

• http://pastebin.com/xhFABpPL (Machine provider name)

• http://pastebin.com/v8LnMiZs (Innotek trick)

• http://pastebin.com/fPY4MiYq (Bios Brand and Bios Version)

• http://pastebin.com/Geggzp4G (Bios Brand and Bios Version)

• http://pastebin.com/T0s5gVGW (Parsing SMBiosData searching for newly-introduced or bizarre type)

• http://pastebin.com/AjHWApes (Cadmus Mac Address Trick)

• http://pastebin.com/wh4NAP26 (VBoxSharedFolderFS Trick)

• http://pastebin.com/Nsv5B1yk (Resume Flag Trick)

VirtualPc

• http://pastebin.com/wuqcUaiE

• http://pastebin.com/VDDRcmdL

• http://pastebin.com/exAK5XQx (Reset Trick)

• http://pastebin.com/HVActZMC (CPUID Trick)

Hypervisor detection

• http://pastebin.com/2gv72r7d