Sneed-Reactivity/yara-mikesxrs/malc0de/webc2_table_apt1.yar

9 lines
189 B
Text
Raw Permalink Normal View History

rule webc2_table : apt
{
strings:
$a = "<![<endif>]--->"
$b = "CreateThread() failed: %d"
$c = "class="
condition:
filesize < 100KB and (3 of ($a,$b,$c))
}