Règles YARA avec le tag PE
3 règles portent le tag « PE ».
Triggers on parts of a big hex string available in lots of crime'ish PE files.
MalwareSignature Base (Florian Roth / Nextron)· Nils Kuhnert· 2021-06-04- SECUINFRA_SUSP_Discord_Attachments_URLMétadonnées seules
Detects a PE file that contains an Discord Attachments URL. This is often used by Malware to download further payloads
Suspect / chasseSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-02-19 - SECUINFRA_SUSP_Netsh_Firewall_CommandMétadonnées seules
No description has been set in the source file - SecuInfra
Suspect / chasseSecuInfra Falcon Team· SECUINFRA Falcon Team· 2022-02-27