Untitled

mail@pastecode.io avatar
unknown
plain_text
18 days ago
384 B
2
Indexable
Never
rule c{
strings:
	//$png1 = "Adobe Fireworks"  ascii
	$png1 = {FF FF 7F 19 10 08 1E 35 E4 23 20 10 08 04 82 9B 82 BA EB 0D 08 04 77 0A A5 EC 67 C0 18 FB 7D 6B}
	$png2 = {76 33 9B DD 24 FB C8 AE 6E B6 9F F7 EB F5 79 B5 BE 33 3B BB B3 3B 79 F6 99 F7 3E F3 8C 0D 08 21}
	$header = {89 50 4E 47 0D 0A 1A 0A 00 00 00 0D 49 48 44 52}
	
condition:
	$header
	and any of ($png*)
	
}
Leave a Comment