YARA unknown stable yara

Check_FilePaths [antidebug_antivm]

View Source

Detection Logic

all of ($path*) and pe.imports("kernel32.dll","GetModuleFileNameA")

Field Validations

Loading…

Comments (0)

Loading comments...