Move is__elf to MISC_Utils.yar

0897926e · jovimon · GitHub · 9e613bc0 · 0897926e
Unverified Commit 0897926e authored Jun 02, 2018 by jovimon Committed by GitHub Jun 02, 2018
Hide whitespace changes
Inline Side-by-side

Showing with 0 additions and 13 deletions

MALW_Torte_ELF.yar malware/MALW_Torte_ELF.yar +0 -13

No files found.
--- a/malware/MALW_Torte_ELF.yar
+++ b/malware/MALW_Torte_ELF.yar
@@ -3,19 +3,6 @@
    long as you use it under this license.
 */

-
-private rule is__elf
-{
-    meta:
-		author = "@mmorenog,@yararules"
-		
-    strings:
-        $header = { 7F 45 4C 46 }
-
-    condition:
-        $header at 0
-}
-
 rule ELF_Linux_Torte : Linux ELF

 {