1 files changed, 1 insertions, 1 deletions
diff --git a/malwares.yara b/malwares.yara
index 6e28d40..8e10e05 100644
--- a/malwares.yara
+++ b/malwares.yara
@@ -21,7 +21,7 @@ private rule IsPhp
        $xml = "<?xml"
    condition:
-        $php and not $xml
+        $php and not $xml and filesize < 5MB
 }
 private rule IRC

diff --git a/malwares.yara b/malwares.yara index 6e28d40..8e10e05 100644 --- a/malwares.yara +++ b/malwares.yara
@@ -21,7 +21,7 @@ private rule IsPhp
21	$xml = "<?xml"	21	$xml = "<?xml"
22		22
23	condition:	23	condition:
24	$php and not $xml	24	$php and not $xml and filesize < 5MB
25	}	25	}
26		26
27	private rule IRC	27	private rule IRC