diff options
| author | jvoisin | 2015-06-30 16:02:55 +0200 |
|---|---|---|
| committer | jvoisin | 2015-06-30 16:02:55 +0200 |
| commit | 97b60696b0a676a297cd8212f67507e7bebd21af (patch) | |
| tree | a907109d82cf0462fe50e8cdd69e7deb2ba1f755 | |
| parent | 77e5a33cfac0b750543297cd9c8756b81d969614 (diff) | |
Add filesize check
| -rw-r--r-- | malwares.yara | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/malwares.yara b/malwares.yara index 6e28d40..8e10e05 100644 --- a/malwares.yara +++ b/malwares.yara | |||
| @@ -21,7 +21,7 @@ private rule IsPhp | |||
| 21 | $xml = "<?xml" | 21 | $xml = "<?xml" |
| 22 | 22 | ||
| 23 | condition: | 23 | condition: |
| 24 | $php and not $xml | 24 | $php and not $xml and filesize < 5MB |
| 25 | } | 25 | } |
| 26 | 26 | ||
| 27 | private rule IRC | 27 | private rule IRC |