diff --git a/support/yara_patterns/tools/pe/x86/packers.yara b/support/yara_patterns/tools/pe/x86/packers.yara index 6c769a41e..12a34d7c6 100644 --- a/support/yara_patterns/tools/pe/x86/packers.yara +++ b/support/yara_patterns/tools/pe/x86/packers.yara @@ -16747,28 +16747,6 @@ rule visual_protect_uv { $1 at pe.entry_point } -rule vmprotect_uv_01 { - meta: - tool = "P" - name = "VMProtect" - pattern = "68????????E8??????00" - strings: - $1 = { 68 ?? ?? ?? ?? E8 ?? ?? ?? 00 } - condition: - $1 at pe.entry_point -} - -rule vmprotect_uv_02 { - meta: - tool = "P" - name = "VMProtect" - pattern = "68????????E8??????FF" - strings: - $1 = { 68 ?? ?? ?? ?? E8 ?? ?? ?? FF } - condition: - $1 at pe.entry_point -} - rule vmprotect_07x_08 { meta: tool = "P"