Signature Base unknown stable yara

ACE_Containing_EXE [yara]

Looks for ACE Archives containing an exe/scr file

View Source

Detection Logic

$header at 7 and for
        any of ($extensions*): (
            $ in (81..(81+uint16(79)))
        )

Field Validations

Loading…

Comments (0)

Loading comments...