Behaviors
List of software behaviors discovered with static code analysis.
Uses a Python script interpreter. (x1)
execution
Detects VMWare related virtualized environments. (x2)
evasion
Decrypts data using the Windows Cryptography API. (x1)
packer
Decodes data using the Base64 algorithm. (x2)
packer
Encodes data using the Base64 algorithm. (x2)
packer
Encodes data using the Base32 algorithm. (x1)
file
Detects presence of debuggers. (x3)
evasion
Writes to files in Windows system directories. (x1)
file
Enumerates system information. (x1)
search
Calculates the SHA-1 hash of data. (x1)
file