Anomaly detection: fractionated imports, kernel32 imports by ordinal
PEStructure renamed to PEStructureKey