Commit 5741401a by mmorenog

Update packer.yar

parent a13f2d70
......@@ -20165,3 +20165,33 @@ rule yoda_crypter_1_3 : Crypter
condition:
$signature1 at pe.entry_point
}
rule dotfuscator : packer
{
meta:
author = "Jean-Philippe Teissier / @Jipe_"
description = "Dotfuscator"
date = "2013-02-01"
filetype = "memory"
version = "1.0"
strings:
$a = "Obfuscated with Dotfuscator"
condition:
$a
}
rule AutoIt : packer
{
meta:
author = "Jean-Philippe Teissier / @Jipe_"
description = "AutoIT packer"
date = "2013-02-01"
filetype = "memory"
version = "1.0"
strings:
$a = "This is a compiled AutoIt script. AV researchers please email avsupport@autoitscript.com for support."
condition:
$a
}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment