Commit 96bb9f2d by mmorenog

Update antidebug.yar

parent a5f5cc2f
...@@ -4,17 +4,6 @@ ...@@ -4,17 +4,6 @@
import "pe" import "pe"
rule DebuggerCheck__API : AntiDebug DebuggerCheck {
meta:
weight = 1
Author = "naxonez"
reference = "https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara"
strings:
$ ="IsDebuggerPresent"
condition:
any of them
}
rule DebuggerCheck__PEB : AntiDebug DebuggerCheck { rule DebuggerCheck__PEB : AntiDebug DebuggerCheck {
meta: meta:
weight = 1 weight = 1
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment