mirror of
https://github.com/VirusTotal/yara.git
synced 2026-10-12 02:10:00 +00:00
13 lines
158 B
Plaintext
13 lines
158 B
Plaintext
import "pe"
|
|
|
|
rule UPX : Packer
|
|
{
|
|
strings:
|
|
$a = {60 E8 00 00 00 00 58 83 E8 3D 50 8D B8}
|
|
|
|
condition:
|
|
$a at pe.entry_point
|
|
|
|
}
|
|
|