Page values for "Ema-1092"

Jump to navigation Jump to search

"Associations" values

Association_TypeBehavior
Associated_Pagevirtual machine detect & evade

"Behavior_Instances" values

Associated_Behaviorvirtual machine detect & evade

"Pages" values

NameNamed System Object Checks
Title_IconBehaviorInstance-Windows.png
Description

Virtual machines often include specific named system objects by default, such as Windows device drivers, which can be detected by testing for specific strings, whether found in the Windows registry or other places.

"References" values

Reference_Date2013-11-01
Malware_Family
Reference_URLhttp://artemonsecurity.com/vmde.pdf