vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-02 03:17:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #276 from fireeye/williballenthin-patch-1

Browse source 
add compiled-from-visual-basic.yml
This commit is contained in:
Willi Ballenthin 2021-02-19 10:16:58 -07:00 • committed by GitHub
commit ceca25cfab
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
compiler/vb/compiled-from-visual-basic.yml Normal file
View file

@ -0,0 +1,12 @@
rule:
meta:
name: compiled from Visual Basic
namespace: compiler/vb
author: "@williballenthin"
scope: file
examples:
- 9bca6b99e7981208af4c7925b96fb9cf
features:
- and:
- string: /VB5!.*/
- import: msvbvm60.ThunRTMain