Create malware odinaff rule

The packer/protector section names/keywords. Source,
http://www.hexacorn.com/blog/2012/10/14/random-stats-from-1-2m-samples-p
e-section-names/

Detect malware Batel

This reverts commit 78031f86.

Info

Detect backdoor batel

Fixed syntax error in petya rules

Fixed some errors in locky rules

pe import missing

Fixed duplicate identifier