From d22e17d623c9adbeca13daca3a7883bea81d53d5 Mon Sep 17 00:00:00 2001 From: Yung Binary <93540406+YungBinary@users.noreply.github.com> Date: Fri, 10 Jan 2025 16:13:16 +0000 Subject: [PATCH] Update Arkei rule to match new samples --- data/yara/CAPE/Arkei.yar | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/data/yara/CAPE/Arkei.yar b/data/yara/CAPE/Arkei.yar index 56bf049f88e..7eff6c52021 100644 --- a/data/yara/CAPE/Arkei.yar +++ b/data/yara/CAPE/Arkei.yar @@ -35,12 +35,12 @@ rule Arkei } $language_check = { - FF 15 ?? ?? ?? ?? - 0F B7 C0 - 89 45 ?? - 81 7D ?? 3F 04 ?? ?? - 7F - } + FF 15 ?? ?? ?? ?? + 0F B7 C0 + 89 45 ?? + 81 7D ?? 3F 04 ?? ?? + 7F + } $ext1 = ".zoo" ascii $ext2 = ".arc" ascii