Signature Base unknown stable yara

Docm_in_PDF [yara]

Detects an embedded DOCM in PDF combined with OpenAction

View Source

Detection Logic

uint32(0) == 0x46445025 and all of them

Field Validations

Loading…

Comments (0)

Loading comments...