vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 19:07:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix MBC names and IDs

Browse source
This commit is contained in:
Baptistin Boilot 2022-02-06 11:13:23 +01:00
parent b01bd14e59
commit efea9a37d9
No known key found for this signature in database
GPG key ID: 42D12035787C7B55
6 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
load-code/pe/rebuild-import-table.yml
View file

@ -5,7 +5,7 @@ rule:
author: "@Ana06"
scope: function
mbc:
- Defense Evasion::Hijack Execution Flow::Import Address Table (IAT) Hooking [F0005.m03]
- Defense Evasion::Hijack Execution Flow::Import Address Table (IAT) Hooking [F0015.003]
references:
- https://0x00sec.org/t/reflective-dll-injection/3080
- https://www.ired.team/offensive-security/code-injection-process-injection/reflective-dll-injection