vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-02 03:17:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

manipulate console: use twos complement

Browse source
This commit is contained in:
William Ballenthin 2020-10-20 15:02:49 -06:00
parent 9bff6f41ed
commit b5bb713431
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
host-interaction/console/manipulate-console.yml
View file

@ -17,4 +17,4 @@ rule:
- api: kernel32.WriteConsoleInput
- optional:
- api: kernel32.GetStdHandle
- number: -11 = STD_OUTPUT_HANDLE
- number: 0xfffffff5 = STD_OUTPUT_HANDLE