mirror of
https://github.com/valitydev/signature-base.git
synced 2024-11-06 10:05:18 +00:00
score adjusted
This commit is contained in:
parent
c775e32091
commit
bd6474b7c3
@ -19,7 +19,7 @@ rule SUSP_XORed_MSDOS_Stub_Message {
|
|||||||
author = "Florian Roth"
|
author = "Florian Roth"
|
||||||
reference = "https://yara.readthedocs.io/en/latest/writingrules.html#xor-strings"
|
reference = "https://yara.readthedocs.io/en/latest/writingrules.html#xor-strings"
|
||||||
date = "2019-10-28"
|
date = "2019-10-28"
|
||||||
score = 65
|
score = 55
|
||||||
strings:
|
strings:
|
||||||
$xo1 = "This program cannot be run in DOS mode" xor ascii wide
|
$xo1 = "This program cannot be run in DOS mode" xor ascii wide
|
||||||
$xo2 = "This program must be run under Win32" xor ascii wide
|
$xo2 = "This program must be run under Win32" xor ascii wide
|
||||||
|
Loading…
Reference in New Issue
Block a user