Quick possible amedey yara
James_inthe_box Jul 18th, 2019 (edited) 350 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
- rule amadey_new_bin_mem
- $string1 = "-LIBGCCW32-EH-2-SJLJ-GTHR-MINGW32"
- $string2 = "w32_sharedptr->size == sizeof(W32_EH_SHARED)"
- $string3 = "%s:%u: failed assertion `%s'"
- $string4 = "../../gcc/gcc/config/i386/w32-shared-ptr.c"
- $string5 = "GetAtomNameA (atom, s, sizeof(s)) != 0"
- $string6 = "BypassUAC"
- $string7 = "AutoRunCmd"
- all of them
RAW Paste Data