admin/mandiant-capa-rules
1
0
Fork 0
mirror of https://github.com/mandiant/capa-rules synced 2026-06-08 15:41:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

initial commit

Browse Source
This commit is contained in:
Yacine Elhamer
2023-08-17 10:41:11 +02:00
parent 25cc6a2d50
commit e937af1ee6
829 changed files with 3634 additions and 2362 deletions
Download Patch File Download Diff File Expand all files Collapse all files
load-code/execute-vbscript-javascript-or-jscript-in-memory.yml
+2 -2
View File
@@ -1,4 +1,3 @@
# generated using capa explorer for IDA Pro
rule:
meta:
name: execute VBScript Javascript or JScript in memory
@@ -6,7 +5,8 @@ rule:
authors:
- blas.kojusner@mandiant.com
description: the sample may execute 32-bit VBScript, JavaScript, or JScript (32-bit)
scope: function
scopes:
static: function
references:
- https://gist.github.com/odzhan/d18145b9538a3653be2f9a580b53b063
examples: