vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 19:07:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

update match rule name

Browse source
This commit is contained in:
mr-tz 2023-10-11 11:20:23 +02:00
parent 5f223ea5ce
commit 66f58dffa0
9 changed files with 10 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

2
load-code/shellcode/execute-shellcode-via-createthreadpoolwait.yml
View file

@ -11,7 +11,7 @@ rule:
- a4f1f09a2b9bc87de90891da6c0fca28e2f88fd67034648060cef9862af9a3bf:0x10001010
features:
- and:
- match: allocate RWX memory
- match: allocate or change RWX memory
- api: CreateEvent
- api: CreateThreadpoolWait
- api: SetThreadpoolWait