Merge pull request #89 from seifreed/patch-7

Create Adwind_JAR_PACKA

malware/Adwind_JAR_PACKA

+rule Adwind_JAR_PACKA {
+ meta:
+  author = “Vitaly Kamluk, Vitaly.Kamluk@kaspersky.com”
+  reference = "https://securelist.com/securelist/files/2016/02/KL_AdwindPublicReport_2016.pdf"
+  last_modi ed = “2015-11-30”
+ strings:
+  $b1 = “.class” ascii
+  $b2 = “c/a/a/” ascii
+  $b3 = “b/a/” ascii
+  $b4 = “a.dat” ascii
+  $b5 = “META-INF/MANIFEST.MF” ascii
+ condition:
+  int16(0) == 0x4B50 and ($b1 and $b2 and $b3 and $b4 and $b5)
+}