Merge pull request #276 from c904370/patch-2

PR for issue #275

Merge pull request #276 from c904370/patch-2
PR for issue #275
9e482b60 · mmorenog · GitHub · 4fd09ada · ff2dd04c · 9e482b60
Unverified Commit 9e482b60 authored Nov 13, 2017 by mmorenog Committed by GitHub Nov 13, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 1 additions and 1 deletions

MALW_PE_sections.yar malware/MALW_PE_sections.yar +1 -1

No files found.
--- a/malware/MALW_PE_sections.yar
+++ b/malware/MALW_PE_sections.yar
@@ -82,5 +82,5 @@ rule suspicious_packer_section : packer PE {
        $s63 = "UPX!" wide ascii
    condition:
-        1 of them
+        (uint16(0) == 0x457f and 1 of them)
 }