Update HotelAlfa.yara

malware/Operation_Blockbuster/HotelAlfa.yara

@@ -20,15 +20,7 @@ rule HotelAlfa
 		72 EF     jb      short loc_4010B4
 	*/
 
-	$rscsDecoderLoop = {
-			8A [2] 
-			80 F1 ?? 
-			88 [2] 
-			8B [2] 
-			40 
-			3B ??
-			72 EF 
-		}
+	$rscsDecoderLoop = {8A [2] 80 F1 ?? 88 [2] 8B [2] 40 3B ?? 72 EF}
 
 	condition:
 		$resourceHTML and $rscsDecoderLoop in ((pe.sections[pe.section_index(".text")].raw_data_offset)..(pe.sections[pe.section_index(".text")].raw_data_offset + pe.sections[pe.section_index(".text")].raw_data_size))