Detection Logic
//MZ header //PE signature
uint16(0) == 0x5A4D and uint32(uint32(0x3C)) == 0x00004550 and $c2 Field Validations
Loading…
Comments (0)
Loading comments...
//MZ header //PE signature
uint16(0) == 0x5A4D and uint32(uint32(0x3C)) == 0x00004550 and $c2 Loading…
Loading comments...