diff --git a/malware/Exploit_CVE_2015_2426.yar b/malware/Exploit_CVE_2015_2426.yar index 22d789f..1ff3236 100644 --- a/malware/Exploit_CVE_2015_2426.yar +++ b/malware/Exploit_CVE_2015_2426.yar @@ -2,7 +2,7 @@ This Yara ruleset is under the GNU-GPLv2 license (http://www.gnu.org/licenses/gpl-2.0.html) and open to any user or organization, as long as you use it under this license. */ -rule Exploit_MS15_077_078 { +rule Exploit_MS15_077_078: Exploit { meta: description = "MS15-078 / MS15-077 exploit - generic signature" author = "Florian Roth" @@ -28,7 +28,7 @@ rule Exploit_MS15_077_078 { uint16(0) == 0x5a4d and filesize < 2000KB and all of ($s*) or all of ($op*) } -rule Exploit_MS15_077_078_HackingTeam { +rule Exploit_MS15_077_078_HackingTeam: Exploit { meta: description = "MS15-078 / MS15-077 exploit - Hacking Team code" author = "Florian Roth"