Signature Base unknown stable yara

PrikormkaDropper [yara]

View Source

Detection Logic

uint16(0) == 0x5a4d and ((any of ($bin*)) or (3 of ($kd*)) or (all of ($inj*)))

Field Validations

Loading…

Comments (0)

Loading comments...