TDL
Marketplace
Browse
Categories
MITRE
Blog
Learn
Market
AI
Sign in
Rules
/
YARA
/
maldoc_indirect_function_call_1 [maldocs]
YARA
unknown
stable
yara
maldoc_indirect_function_call_1 [maldocs]
View Source
Detection Logic
Copy
for any i in (1..#a): (uint8(@a[i] + 2) == uint8(@a[i] + 5))
Field Validations
+ Add validation
Loading…
Comments (0)
Sign in with GitHub
Loading comments...