Add YARA rules for PEPack and SoftwareCompress packers

Introduced two new rules: Packer__PEPack and Packer__SoftwareCompress. These rules detect PE files packed with PEPack and SoftwareCompress by checking for specific section names in the PE headers.

Author: DosX-dev

yara_rules/DiE_InterestingThings_by_DosX.yar

@@ -103,6 +103,26 @@ rule Packer__XPack {
         pe.sections[0].name == ".XPack0"
 }
 
+rule Packer__PEPack {
+    condition:
+        IsPE and
+        IsNative and (
+            for any i in (0..pe.number_of_sections - 1) : (
+                pe.sections[i].name == "PEPACK!!"
+            )
+        )
+}
+
+rule Packer__SoftwareCompress {
+    condition:
+        IsPE and
+        IsNative and (
+            for any i in (0..pe.number_of_sections - 1) : (
+                pe.sections[i].name == "SoftComp"
+            )
+        )
+}
+
 rule Protection__obfus_h {
     condition:
         IsPE and