Behaviors
List of software behaviors discovered with static code analysis.
Sends data on a connected TCP socket. (x1)
network
Receives data from a connected TCP socket. (x1)
network
Opens a TCP connection to a remote server. (x1)
network
Contains URLs that link to interesting file formats. (x1)
network
Creates a process. (x2)
execution
Decodes hex or base64-encoded streams. (x1)
packer
Contains URLs that reference the host by IP address. (x1)
network
Queries the value of an environment variable. (x2)
search
Converts binary data to its string representation, commonly used in obfuscation. (x3)
packer
Terminates the current running process. (x1)
execution