1. A method comprising: configuring a virtual machine with a selected software profile by establishing a software environment within the virtual machine, the software environment includes one or more operating systems and application software components associated with a destination device; receiving a first portion of network traffic by the virtual machine that is configured to simulate operations of the destination device; observing one or more anomalous behaviors of the virtual machine processing the first portion of the network traffic, the one or more anomalous behaviors comprises an unexpected behavior of the virtual machine while the first portion of the network traffic is being processed; and generating a signature that is associated with the one or more anomalous behaviors for detection of a presence of malicious code within the network traffic.