Windows API Usage Styles

Distribution of Windows API usage styles.

It: PE header defined ImportTable
Dyn: Dynamic imports that are cached in memory (detected by ApiScout)
Obf: Obfuscation schemes that avoid caching of the exact Windows API function offsets.
IT313 (47.86%)
DYN198 (30.28%)
OBF21 (3.21%)
IT+DYN115 (17.58%)
IT+OBF3 (0.46%)
DYN+OBF3 (0.46%)
IT+DYN+OBF1 (0.15%)