Commit 2677e37c by mmorenog

Update WhiskeyBravo.yara.error

parent cc419b5e
/*
import "pe" import "pe"
...@@ -49,4 +48,4 @@ rule WhiskeyBravo ...@@ -49,4 +48,4 @@ rule WhiskeyBravo
condition: condition:
2 of ($ext*) and $a in ((pe.sections[pe.section_index(".text")].raw_data_offset)..(pe.sections[pe.section_index(".text")].raw_data_offset + pe.sections[pe.section_index(".text")].raw_data_size)) 2 of ($ext*) and $a in ((pe.sections[pe.section_index(".text")].raw_data_offset)..(pe.sections[pe.section_index(".text")].raw_data_offset + pe.sections[pe.section_index(".text")].raw_data_size))
} }
*/
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment