12 lines
229 B
Text
12 lines
229 B
Text
|
import "pe"
|
||
|
|
|
||
|
|
rule _UPX_v0896
|
||
|
|
{
|
||
|
|
meta:
|
||
|
|
description = "UPX v0.89.6 - v1.02 / v1.05 - v1.22 DLL"
|
||
|
|
strings:
|
||
|
|
$0 = {80 7C 24 08 01 0F 85 ?? ?? ?? 00 60 BE ?? ?? ?? ?? 8D BE ?? ?? ?? ?? 57 83 CD FF}
|
||
|
|
condition:
|
||
|
|
$0 at (pe.entry_point)
|
||
|
|
}
|