misp-modules/tests/yara_pe_module_test.yara

6 lines
101 B
Plaintext

import "pe"
rule my_pe {
condition:
pe.imphash() == "eecc824da5b175f530705611127a6b41"
}