Malware Detection Based on Deep Learning of Behavior Graphs

Table 1

Operating system resource types and API calls.

Operating System Resource Types	Lists of API Calls
Service	OpenSCManager, OpenService, StartService
Process	NtOpenSection, ZwMapViewOfSection, NtFreeVirtualMemory, NtCreateSection, CreateProcessInternal, ExitProcess,
Filesystem	NtCreateFile, NtReadFile, NtSetInformationFile, NtOpenFile, NtWriteFile, DeviceIoControl, CreateDirectory, DeleteFile, FindFirstFile, NtDeviceIoControlFile, NtQueryInformationFile
Registry	RegOpenKey, RegSetValue, RegCloseKey, RegDeleteValue, RegQueryValue, RegCreateKey, NtOpenKey, NtQueryValueKey, RegEnumValue, RegEnumKey, NtQueryKey, RegQueryInfoKey
Synchronization	NtCreateMutant, NtOpenMutant
Network	WSAStartup, getaddrinfo
System	NtDelayExecution, FindWindow, SetWindowsHook, RemoveDirectory, GetSystemMetrics, LookupPrivilegeValue