Sneed-Reactivity/yara-mikesxrs/patrickrolsen/UPX_v0896.yar
Sam Sneed 08e8d462fe OMG ISTG PLS WORK
RED PILL 🔴 💊
2024-07-25 12:43:35 -05:00

11 lines
229 B
Text

import "pe"
rule _UPX_v0896
{
meta:
description = "UPX v0.89.6 - v1.02 / v1.05 - v1.22 DLL"
strings:
$0 = {80 7C 24 08 01 0F 85 ?? ?? ?? 00 60 BE ?? ?? ?? ?? 8D BE ?? ?? ?? ?? 57 83 CD FF}
condition:
$0 at (pe.entry_point)
}