Behaviors
List of software behaviors discovered with static code analysis.
Retrieves the local computer name. (x1)
search
Writes to files in Windows system directories. (x1)
file
Enumerates system information. (x4)
search
Modifies the timestamp of a file. (x3)
file
Terminates a process/thread. (x7)
execution
Detects presence of debuggers. (x7)
evasion
Tampers with system environment variables. (x4)
settings
Delays execution. (x1)
execution
Tampers with module search locations. (x1)
execution
Contains reference to ntdll.dll which is NT Layer DLL. (x5)
execution