1. A method, performed by at least one processor, for identifying malware, comprising: performing a static analysis on each of a plurality of files; for each file of the plurality of files, determining in the static analysis whether the file includes code with an application programming interface (API) call; for each file, of the plurality of files, found to include code with an API call, determining in the static analysis whether the API call is a junk API call, the determining including determining whether the API call returns an output value that is discarded and never used in any subsequent operation except storing the output value in a storage operation by writing the output value to a register of a processor but the code of the file subsequently overwriting the register of the processor; and alerting regarding one or more junk API calls found in one of the plurality of files.