Updated

Updated

Updated
4243611d · j0sm1 · 95975f1e · 4243611d
Commit 4243611d authored 9 years ago by j0sm1
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

CRIME_Shifu_trojan.yar malware/CRIME_Shifu_trojan.yar +2 -2

No files found.
--- a/malware/CRIME_Shifu_trojan.yar
+++ b/malware/CRIME_Shifu_trojan.yar
@@ -58,8 +58,8 @@ rule Shifu : Shifu {
 		reference = "https://blogs.mcafee.com/mcafee-labs/japanese-banking-trojan-shifu-combines-malware-tools/"
 		author = "McAfee Labs"
 	strings:
-		$a = “CryptCreateHash”
+		$a = "CryptCreateHash"
-		$b = “RegCreateKeyA”
+		$b = "RegCreateKeyA"
 		$c = {2F 00 63 00 20 00 73 00 74 00 61 00 72 00 74 00 20 00 22 00 22 00 20 00 22 00 25 00 73 00 22 00 20 00 25 00 73 00 00 00 00 00 63 00 6D 00 64 00 2E 00 65 00 78 00 65 00 00 00 72 00 75 00 6E}
 		$d = {53 00 6E 00 64 00 56 00 6F 00 6C 00 2E 00 65 00 78 00 65}
 		$e = {52 00 65 00 64 00 69 00 72 00 65 00 63 00 74 00 45 00 58 00 45}