mirror of
https://github.com/VirusTotal/yara.git
synced 2026-10-11 22:49:58 +00:00
14 lines
179 B
Plaintext
14 lines
179 B
Plaintext
import "pe"
|
|
|
|
rule UPX : Packer
|
|
{
|
|
strings:
|
|
$a = {60 E8 00 00 00 00 58 83 E8 3D 50 8D B8}
|
|
|
|
condition:
|
|
$a at pe.entry_point
|
|
}
|
|
|
|
|
|
rule test {condition: false}
|