11 lines
352 B
Text
11 lines
352 B
Text
|
rule mpress_2_xx_net : Packer
|
||
|
|
{
|
||
|
|
meta:
|
||
|
|
author="Kevin Falcoz"
|
||
|
|
date_create="24/03/2013"
|
||
|
|
description="MPRESS v2.XX .NET"
|
||
|
|
strings:
|
||
|
|
$signature1={21 46 00 69 00 6C 00 65 00 20 00 69 00 73 00 20 00 69 00 6E 00 76 00 61 00 6C 00 69 00 64 00 2E 00 00 0D 4D 00 50 00 52 00 45 00 53 00 53 00 00 00 00 00 2D 2D 93 6B 35 04 2E 43 85 EF}
|
||
|
|
condition:
|
||
|
|
$signature1
|
||
|
|
}
|