This rule detects binary loaders that decode shellcode using a word-based mapping scheme. It identifies patterns associated with tokenization and RC4 encryption techniques.
S12cybersecurity