Function Name
QueryPerformanceCounter
Description
QueryPerformanceCounter is used to retrieve the frequency of the performance counter. This function is commonly used by malware for anti-debugging purposes. The malware will measure the time before and after an operation, if the time exceeds taken expected time, the malware will terminate or activate a benign function.
Library
Kernel32.dll
Associated Attacks
Anti-Debugging
Created: 2021-11-01
Last Update: 2021-11-01
Credits: mr.d0x