diff --git a/runtime-packer/machinetag.json b/runtime-packer/machinetag.json index 4ac69a0..4057e37 100644 --- a/runtime-packer/machinetag.json +++ b/runtime-packer/machinetag.json @@ -3,10 +3,6 @@ "description": "Runtime or software packer used to combine compressed or encrypted data with the decompression or decryption code. This code can add additional obfuscations mechanisms including polymorphic-packer or other obfuscation techniques. This taxonomy lists all the known or official packer used for legitimate use or for packing malicious binaries.", "version": 2, "predicates": [ - { - "value": "pe", - "expanded": "Portable Executable (PE)" - }, { "value": "dex", "expanded": "Dalvik Executable (DEX)" @@ -19,6 +15,10 @@ "value": "macho", "expanded": "Mach-object (Mach-O)" }, + { + "value": "pe", + "expanded": "Portable Executable (PE)" + }, { "value": "cli-assembly", "expanded": "CLI assembly"