admin/MBCProject-mbc-markdown
1
0
Fork 0
mirror of https://github.com/MBCProject/mbc-markdown synced 2026-06-08 11:36:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update move-file.md

Browse Source 
Updated CAPE link and CAPE class
This commit is contained in:
brightmt
2024-10-02 10:28:36 -04:00
committed by GitHub
parent 44a35ab0d8
commit e7a3dae7e6
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
micro-behaviors/file-system/move-file.md
+3 -3
View File
@@ -47,9 +47,9 @@ Malware moves a file.
|---|---|---|
|[move file](https://github.com/mandiant/capa-rules/blob/master/host-interaction/file-system/move/move-file.yml)|Move File (C0063)|kernel32.MoveFile, kernel32.MoveFileEx, MoveFileWithProgress, MoveFileTransacted, rename, _wrename, System.IO.FileInfo::MoveTo, System.IO.File::Move, kernel32.SHFileOperation|
|Tool: CAPE|Mapping|APIs|
|---|---|---|
|[move_file_on_reboot](https://github.com/CAPESandbox/community/tree/master/modules/signatures/move_file_on_reboot.py)|Move File (C0063)|MoveFileWithProgressTransactedA, MoveFileWithProgressTransactedW|
|Tool: CAPE|Class|Mapping|APIs|
|---|--|---|---|
|[move_file_on_reboot](https://github.com/CAPESandbox/community/blob/master/modules/signatures/windows/move_file_on_reboot.py)|move_file_on_reboot|Move File (C0063)|MoveFileWithProgressTransactedA, MoveFileWithProgressTransactedW|
### C0063 Snippet
<details>