valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 10:05:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update gen_Excel4Macro_Sharpshooter.yar

Browse Source 
There are some misses due to file size restriction. These maldoc files are over 2MB:

d75f78cf9fcb4e643478858d7136009f5b5ec8eb36df0e7ffa6604700b04c904
be6dc7cc4c8d1bc2375020d2f8e3f5f532c7c400a1714961a43749b00caf6569
This commit is contained in:
John Lambert 2020-04-01 12:49:19 -07:00 committed by GitHub
parent e5129c647a
commit 89cd779db0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
yara/gen_Excel4Macro_Sharpshooter.yar
View File

@ -60,7 +60,7 @@ rule SUSP_Excel4Macro_AutoOpen
condition:
filesize < 400KB
filesize < 3000KB
and $header_docf at 0
and $s1
and any of ($Auto_*)