Summary | ZeroBOX

dataTables.bootstrap4.css

ScreenShot AntiVM AntiDebug
Category Machine Started Completed
FILE s1_win7_x6401 April 19, 2025, 8:21 p.m. April 19, 2025, 8:24 p.m.
Size 5.9KB
Type ASCII text, with CRLF line terminators
MD5 87a8058d130b9fcdbbd79e5e4450e391
SHA256 66b06e746b84c46487cb9ef02b2dc8047c9bb81451217b64b5bb6af518936461
CRC32 7795319B
ssdeep 96:mJqfYjbAeuI8sxaM++GXhaCzi6b1bl6bQrPJKcZK2Wa1:mHjbAeuI8sxaM+DXhaCzi6b1bl6bQrPd
Yara None matched

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

1 1 0
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

process_identifier: 2688
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x733c2000
process_handle: 0xffffffff
1 0 0
description Take ScreenShot rule ScreenShot
description (no description) rule DebuggerCheck__GlobalFlags
description (no description) rule DebuggerCheck__QueryInfo
description (no description) rule DebuggerHiding__Thread
description (no description) rule DebuggerHiding__Active
description (no description) rule ThreadControl__Context
description (no description) rule SEH__vectored
description Checks if being debugged rule anti_dbg
description Bypass DEP rule disable_dep