Other
yara_rules: Static rules
creates_exe: Creates executable files in the file system
static_pe_anomaly: The PE file structure contains anomalies
creates_in_windows: Creates files in the Windows directory
copies_self: Creates a copy of itself
http_file_not_found: Attempts to download EXE or DLL file but receives HTML with an error
suspicious_process: Spawns a suspicious process
unexpected_exception: Unexpected exception
static_pe_duplicate_sections: The PE file structure contains anomalies: duplicate section names
no_graphical_activity: No graphic activity
pe_overlay: PE file contains overlay