vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 10:58:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix formatting

Browse source
This commit is contained in:
Desiree Beck 2021-12-14 16:37:31 -05:00
parent ed3661b379
commit 1294158df2
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
load-code/shellcode/spawn-thread-to-rwx-shellcode.yml
View file

@ -5,8 +5,8 @@ rule:
author: moritz.raabe@mandiant.com
scope: function
mbc:
- Memory::Allocate Memory [C0007]
- Process::Create Thread [C0038]
- Memory::Allocate Memory [C0007]
- Process::Create Thread [C0038]
examples:
- Practical Malware Analysis Lab 19-02.exe_:0x401230
features: