Commit 10ec5e88 by Marc Rivero López Committed by GitHub

Update packer.yar

fixed Install shield rule
parent 3f7ba85d
......@@ -10994,18 +10994,21 @@ condition:
}
rule InstallShield2000
rule Install_Shield_2000
{
meta:
author="malware-lu"
strings:
author = "PEiD"
description = "Microsoft Visual C++ 5.0"
group = "15"
function = "16"
strings:
$a0 = { 55 8B EC 6A FF 68 ?? ?? ?? ?? 68 ?? ?? ?? ?? 64 A1 ?? ?? ?? ?? 50 64 89 25 ?? ?? ?? ?? 83 C4 ?? 53 56 57 }
condition:
condition:
$a0 at pe.entry_point
}
rule Obsidium1337ObsidiumSoftware
{
meta:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment