DRATzarus can use the GetTickCount and GetSystemTimeAsFileTime API calls to measure function timing. DRATzarus can also remotely shut down into sleep mode under specific conditions to evade detection.