YARA unknown stable yara

RTF_Shellcode [maldocs]

identifies RTF's with potential shellcode

View Source

Detection Logic

($rtfmagic at 0) and ($scregex)

Field Validations

Loading…

Comments (0)

Loading comments...