A.X yara

rule A_dot_X_embedded
{
    meta:
        author = " James_inthe_box"
        date = "2018/09"
        maltype = "Malicious Package"

    strings:
        $s1 = "objdata"
        $s2 = "412e5800433a"

    condition:
        all of them
}