I am new to malware analysis and am currently using Cuckoo to understand some of the basics.
I am trying to figure the time that the malware delays its initial executions. I found a functional call
NtDelayExecution in the API/System calls that had two parameters:
Status => Skipped and
Milliseconds => 1000. The status of the function call reads
What does the argument
Status mean? Does it mean that the call was skipped? Because there are other calls to
NtDelayExecution that do not have the argument