SEKOIA.IO unknown stable yara

apt_evasive_panda_rphost_dll [yara_rules]

Detects DLL used by Evasive Panda

View Source

Detection Logic

uint16be(0) == 0x4d5a and 
        all of them 
        
        and filesize < 1MB

Field Validations

Loading…

Comments (0)

Loading comments...