ID	OB0002
Created	1 August 2019
Last Modified	12 June 2023

# Anti-Static Analysis Behaviors and code characteristics that prevent or hinder static analysis of the malware. Simple static analysis identifies features such as embedded strings, header information, or file metadata. More involved static analysis involves the disassembly of the binary code. * **Call Graph Generation Evasion** [B0010](../anti-static-analysis/call-graph-generation-evasion.md) * **Disassembler Evasion** [B0012](../anti-static-analysis/disassembler-evasion.md) * **Data Flow Analysis Evasion** [B0045](../anti-static-analysis/data-flow-analysis-evasion.md) * **Executable Code Obfuscation** [B0032](../anti-static-analysis/executable-code-obfuscation.md) * **Executable Code Optimization** [B0034](../anti-static-analysis/executable-code-optimization.md) * **Executable Code Virtualization** [B0008](../anti-static-analysis/executable-code-virtualization.md) * **Obfuscated Files or Information** [E1027](../defense-evasion/obfuscated-files-or-information.md) * **Software Packing** [F0001](../anti-static-analysis/software-packing.md) ## References [1] https://search.unprotect.it/category/sandbox-evasion/ [2] InDepthUnpacking, course content for teaching malware anti-analysis techniques and mitigations, with emphasis on packers. https://github.com/knowmalware/InDepthUnpacking