Fix suspicious_packer_section rule

1. The check of first two bytes was wrong for PE files.
2. Limit the search to the first 1024 bytes of the files, which
   should be sufficient to match on section names.

Create Capabilities ruleset

Update RAT_Xtreme.yar

Create MALW_KeyBase.yar

The Capabilities ruleset contains rules that do not fit into one
of the other categories but are useful information for analysis.
The initial rules are those from the AntiDebug AntiVM ruleset that
are not related to anti-analysis techniques.

Fixes #316

Better SEH Detection

I have improved the @naxonez rules. These should be lower FP. Please let me know.

Disable Armadillo v1.71 PEiD rules

Make this rule private to prevent alerts for it as it only seems to serve as a building block for other rules.

regenrated index

APT 10 New TTP rules 

add sig for Hancitor botnet malware

fix Maldoc_APT19_CVE-2017-1099 extension