VxLang

BLOG

What is vxlang?

VXLANG is a project designed to prevent reverse-engineering behaviors such as static or dynamic analysis, file tampering, and unauthorized access to memory by attackers.

The vxlang project currently targets x86-64 system and .Net binaries, native binary files for the Microsoft Windows operating system, including executables with the ".exe" extension, dynamic link library files with the ".dll" extension, and kernel driver files with the ".sys" extension. (The types of target binaries supported by vxlang will be expanded in future updates).

Virtualization Preview

Before

After

Obfuscation Preview

Before

After

Precautions

Optimization : Verify that VxVirtualizationBegin and VxVirtualizationEnd are in the same block.
If procedures are merged due to code optimization, problems may arise.
switch-case : In the switch-case, when the branch movement is not an IMM value, it may be moved to the original position.
Exception handling : Currently, the virtual CPU does not support exception handling.

Deploying the full version

The full version of VxLang is developed and operated under donation through Patreon. The exact usage of VxLang and sharing of extension module code, new features of VxLang, etc. will be shared. If you have any questions, please send your request to the email below.

E-Mail: 0x999h@gmail.com
Full Version
- You can control all features of the VxLang protector.
- Support for virtual CPUs with specialized CPU contexts.
Patreon
- Plans
  - November plans
- Developing custom anti-tamperers with VxLang full version and plugins.

Latest Version

1.0.0

1.0.0.3
- Adjust the speed of code flattening (compiles faster)
- Randomly modify code flattening context (more updates coming soon)
- Fixed bug:https://www.patreon.com/posts/92864752?utm_campaign=postshare_creator
- Virtual Machine Rotation.
1.0.0.2
- Adjust the packing speed.
- Increases the virtualization scope of shell code.
  - The above changes continuously.
1.0.0.1
- Code-flattening can now be applied to packer shell code as well.
- Fixed a small bug.
- Obfuscation has been rotated.

0.9.9

0.9.9.14
- Encrypt resource data. (In a future update, all but static resource data will be hidden.)
- Fixed where to look for keys from the current directory to the VxLang location.
- Fixed a bug with log output.
- The number of virtual machines has been added to 70+.
- Obfuscation has been rotated.
0.9.9.13
- Fixed the appearance of code flattening output
- Add Code Flattening API
  - VL_CODE_FLATTENING_TYPE2_BEGIN / VL_CODE_FLATTENING_TYPE2_END
- Obfuscation rotation
- Fixed operating speed
- Fix SDK missing
0.9.9.12
- Added code virtualization to the packer shell code
- The VxLang key has been updated
0.9.9.11
- Fixed node depth for code flattening
- Rotated obfuscation
0.9.9.10
- User-reported bug fixes
  - Critical bug: Bug fix for import table protection
  - Fixed a bug where some anti-debugging features were automatically enabled
- Thank you so much for reporting this :)
0.9.9.9
- Added --opt-section-name, which sets the section name to be based on.
  - Ex) vxlang.exe ${EXE} --opt-section-name .test
- Rotated the license key and obfuscation.
- Fixed a few small bugs.
0.9.9.8
- Fixed a bug where the Flatten Entry Points option was not being applied when run on its own.
  - You can run --opt-fla-entry on its own, without adding any code flattening related SDKs.
0.9.9.7
- Add 50 or more virtual machines.
- Rotate obfuscation.
0.9.9.6
- Added key checking for VxLang: invalid keys will prevent execution.
- Fixed a conflict with some features in Axion mode.
- Fixed plugin arguments.
0.9.9.5
- Remove debug information (PDB) by default.
  - Adding --use-debug-data will generate debug information.
- Some of the packer shell code has become a code virtualization task.
0.9.9.4
Add 30+ virtual machines.
- Contexts/handlers/handle tables/link tables/etc. are all different.
Modify the VxLang context for "Customizing the full-version of VxLang Part 3".
Update download links.
0.9.9.3
- Added commands for virtual machines.
- Fixed a small bug.
0.9.9.2
- Fixed bugs with protector.
- Fixed the Protector API.
0.9.9.1
- Updated the core(Virtual-CPU) of code virtualization.
  - All handler and link code, and handle tables are randomized.
Download

TODO

1.0.0
1. develop the ELF editor.
2. test and bug fix for Windows version.
Task
- Add ELF32/64 format for x86-64
- Add code obfuscation methods for x86-64
  - Once the above steps are complete, add the ARM system for the ELF file format.

Special Thanks

Thank you to everyone who helped with the development.

RiccardoAncarani / vxlang-page