YARA unknown stable yara

Check_Debugger [antidebug_antivm]

View Source

Detection Logic

pe.imports("kernel32.dll","CheckRemoteDebuggerPresent") and
		pe.imports("kernel32.dll","IsDebuggerPresent")

Field Validations

Loading…

Comments (0)

Loading comments...