Defense Evasion
T1027.001 static_overlay_padding: Overlay contents padding
Other
yara_rules: Static rules
no_graphical_activity: No graphic activity
dotnet_antimetadata_analysis: Dotnet program has anti-analysis tricks
dotnet_import_unmanaged_code: Dotnet program statically imports unmanaged functions/modules
pe_overlay: PE file contains overlay