mirror of
https://github.com/stellarbear/YaraSharp
synced 2026-06-08 17:36:09 +00:00
stellarbears
12 lines
142 B
Plaintext
12 lines
142 B
Plaintext
|
|
rule UPX : Packer
|
|
{
|
|
strings:
|
|
$a = {60 E8 00 00 00 00 58 83 E8 3D 50 8D B8}
|
|
|
|
condition:
|
|
$a at entrypoint
|
|
|
|
}
|
|
|