Update LimaDelta.yara

bf797b97 · mmorenog · bc657aba · bf797b97
Commit bf797b97 authored Feb 25, 2016 by mmorenog
Hide whitespace changes
Inline Side-by-side

Showing with 1 additions and 12 deletions

LimaDelta.yara malware/Operation_Blockbuster/LimaDelta.yara +1 -12

No files found.
--- a/malware/Operation_Blockbuster/LimaDelta.yara
+++ b/malware/Operation_Blockbuster/LimaDelta.yara
@@ -21,18 +21,7 @@ rule LimaDelta
 		75 E3              jnz     short loc_4026CE
 	*/
-	$fileDecoder = {
+	$fileDecoder = {8B ?? ?? 83 ?? 10 81 ?? 6D 3A 71 58 89 ?? 33 ?? 66 ?? ?? F0 89 ?? 04 83 ?? 08 4? 75}
-			8B ?? ?? 
-			83 ?? 10 
-			81 ?? 6D 3A 71 58 
-			89 ?? 
-			33 ?? 
-			66 ?? ?? F0 
-			89 ?? 04 
-			83 ?? 08 
-			4? 
-			75 
-		}
 	/*
 		66 81 BC 24 A0 00 00 00 BB 01  cmp     [esp+98h+arg_4], 1BBh