Sneed-Reactivity/yara-mikesxrs/patrickrolsen/mpress_2_xx_net _ Packer.yar
Sam Sneed 08e8d462fe OMG ISTG PLS WORK
RED PILL 🔴 💊
2024-07-25 12:43:35 -05:00

11 lines
No EOL
352 B
Text

rule mpress_2_xx_net : Packer
{
meta:
author="Kevin Falcoz"
date_create="24/03/2013"
description="MPRESS v2.XX .NET"
strings:
$signature1={21 46 00 69 00 6C 00 65 00 20 00 69 00 73 00 20 00 69 00 6E 00 76 00 61 00 6C 00 69 00 64 00 2E 00 00 0D 4D 00 50 00 52 00 45 00 53 00 53 00 00 00 00 00 2D 2D 93 6B 35 04 2E 43 85 EF}
condition:
$signature1
}