Peekaboo intercepts routines and monitors the number of modules loaded, system calls made, and threads created to determine the sample's runtime behavior.

By providing deep control over the sample, it facilitates the extraction of features like API calls and network communication even when the malware attempts to remain dormant.

It primarily runs on Windows 10 64-bit Pro guest VMs, managed by an Ubuntu 22.04 host management layer using Python.