rule Parite : Might_Be_Malware
{
meta:
author="me"
condition:
pe.sections[pe.section_index(pe.entry_point)].name contains "$07"
}doest work, iam trying to check for byte $07 in the name no idea howto do it :x -- You received this message because you are subscribed to the Google Groups "YARA" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
