Behaviors

List of software behaviors discovered with static code analysis.

Tampers with system environment variables. (x1)

settings

Contains URLs that link to interesting file formats. (x1)

network

Contains URLs that link to raw files on GitHub. (x2)

network

Contains code outside of a common screen width. (x7)

stealth

Contains URLs that reference the host by IP address. (x5)

network

Converts binary data to its string representation, commonly used in obfuscation. (x4)

packer

Contains the PDF (pop directional formatting) Unicode character, commonly used with bidirectional text. (x4)

anomaly

Contains the ZWSP (zero width space) Unicode character. (x4)

anomaly

Serializes data into the JSON format. (x9)

file