Sneed-Reactivity/yara-mikesxrs/EmersonElectricCo/ft_zip.yara

15 lines
238 B
Text
Raw Normal View History

rule ft_zip
{
meta:
author = "Jason Batchelor"
company = "Emerson"
lastmod = "20141217"
desc = "File type signature for basic ZIP files."
strings:
$pk = { 50 4B 03 04 }
condition:
$pk at 0
}