Packer identification based on metadata signature
Anomalous system call detection