13 lines
311 B
Text
13 lines
311 B
Text
|
rule YahLover : Worm
|
||
|
|
{
|
||
|
|
meta:
|
||
|
|
author="Kevin Falcoz"
|
||
|
|
date="10/06/2013"
|
||
|
|
description="YahLover"
|
||
|
|
|
||
|
|
strings:
|
||
|
|
$signature1={42 00 49 00 54 00 52 00 4F 00 54 00 41 00 54 00 45 00 00 00 42 00 49 00 54 00 53 00 48 00 49 00 46 00 54 00 00 00 00 00 42 00 49 00 54 00 58 00 4F 00 52}
|
||
|
|
|
||
|
|
condition:
|
||
|
|
$signature1
|
||
|
|
}
|