Update APT_Passcv.yar

malware/APT_Passcv.yar

@@ -159,3 +159,4 @@ rule PassCV_Sabre_Malware_5 {
       $s5 = "SHARECONTROL" fullword wide
    condition:
       ( uint16(0) == 0x5a4d and filesize < 4000KB and 1 of ($x*) or all of ($s*) )
+}