valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 10:05:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: deactivate rule due to missing support for md5()

Browse Source
This commit is contained in:
Florian Roth 2019-04-10 11:12:21 +02:00
parent 989a5fb54d
commit 6b51398f01
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
yara/apt_flame2_orchestrator.yar
View File

@ -1,3 +1,6 @@
/* Limited support for hash function */
/*
import"pe"
import"hash"
@ -28,3 +31,4 @@ rule FLAME2_Orchestrator {
(hash.md5(pe.resources[i].offset,pe.resources[i].length) == "9a2766aba7f2a56ef1ab24cf171ee0ed") or
(hash.md5(pe.resources[i].offset,pe.resources[i].length) == "ebe15bfb5a3944ea4952ddf0f73aa6e8"))
}
*/