Skip to content

Commit

Permalink
remove optional block with LoadLibrary APIs and indirect call
Browse files Browse the repository at this point in the history
  • Loading branch information
mr-tz committed Jun 14, 2024
1 parent e6befc9 commit 0c7d1bd
Showing 1 changed file with 0 additions and 6 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -19,9 +19,3 @@ rule:
- or:
- api: kernel32.GetProcAddress
- api: ntdll.LdrGetProcedureAddress
- optional:
- characteristic: indirect call
- api: kernel32.LoadLibrary
- api: kernel32.GetModuleHandle
- api: kernel32.GetModuleHandleEx
- api: ntdll.LdrLoadDll

0 comments on commit 0c7d1bd

Please sign in to comment.