From 5c889db4a918ebc79ca2a4ef7790cca5c283b352 Mon Sep 17 00:00:00 2001
From: Florian Roth <florian.roth@bsk-consulting.de>
Date: Fri, 6 Oct 2017 23:54:13 +0200
Subject: [PATCH] FreeMilk YARA rules bugfix - thx to M. Selck

---
 yara/apt_freemilk.yar | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/yara/apt_freemilk.yar b/yara/apt_freemilk.yar
index 8b18e54..fdccced 100644
--- a/yara/apt_freemilk.yar
+++ b/yara/apt_freemilk.yar
@@ -6,6 +6,8 @@
    Reference: https://researchcenter.paloaltonetworks.com/2017/10/unit42-freemilk-highly-targeted-spear-phishing-campaign/
 */
 
+import "pe"
+
 /* Rule Set ----------------------------------------------------------------- */
 
 rule FreeMilk_APT_Mal_1 {