custom_logical_sigs.ldb.example

MyTest.PHP.Base64L.0;Engine:81-255,Target:0;0;6576616c286261736536345f6465636f646528245f636f6f6b6965::i
MyTest.JS.EvilCorp.0;Engine:81-255,Target:0;0&1;3c7469746c653e6576696c20636f72703c2f7469746c653e::i;3c7363726970743e646f63756d656e742e6164646576656e746c697374656e65722822646f6d636f6e74656e746c6f61646564::i
MyTest.HTML.MultiTitle.0;Engine:81-255,Target:0;(0|1)>1;3c7469746c653e::i;3c2f7469746c653e::i
MyTest.HTML.MultiTitle.1;Engine:81-255,Target:0;(0|1)>2,2;3c7469746c653e::i;3c2f7469746c653e::i
MyTest.PE.EPS1.0;Engine:81-255,Target:1,NumberOfSections:1-2;(0|1);EP+123:a1a1a1;S1+234:b1b1b1
MyTest.PHP.SmallEval.0;Engine:81-255,Target:0,FileSize:25-50;0;6576616c286261736536345f6465636f6465::i
PHP.Eval.Base64.0;Engine:81-255,Target:0;2;6576616c;6261736536345f6465636f6465;0&1/php\s*eval\(/si
PHP.Eval.Base64.1;Engine:81-255,Target:0;2;245f706f73745b;245f726571756573745b;0|1/^<\?php/
PHP.Eval.Base64.2;Engine:81-255,Target:0;(2&3);245f706f73745b;245f726571756573745b;0|1/^<\?php/;6576616c286261736536345f6465636f6465::i
PHP.Eval.Base64.3;Engine:81-255,Target:0;2;245f706f73745b;245f726571756573745b;0|1/^<\?php.{0,100}eval/
PHP.Claster.Base64.0;Engine:81-255,Target:0;1;636c617373{7-15}66756e6374696f6e205f5f636f6e7374727563742829207b2024636f6465203d2024746869732d3e636f72652824746869732d3e5f6d6f7665::i;0/var \$\w+[\s\=]+['"][\w\+\/\=\s]+['"]\x3B\s*var \$\w+[\s\=]+['"][\w\+\/\=\s]+['"]\x3B } new/si
GIF.PHP.1;Engine:81-255,Target:0;0&1;676966::i;706870::i
GIF.HTML.1;Engine:81-255,Target:0,Intermediates:CL_TYPE_GIF>CL_TYPE_HTML;0&1;676966::i;3c68746d6c::i
GIF.HTML.2;Engine:81-255,Target:0,Intermediates:CL_TYPE_GIF>CL_TYPE_HTML;0;74686973206973206120746573742066696c65::i
PHP.Eval.Base64.0;Engine:81-255,Target:0;2;6576616c;6261736536345f6465636f6465;0&1/php\s*eval\(/si
PHP.Eval.Base64.1;Engine:81-255,Target:0;2;245f706f73745b;245f726571756573745b;0|1/^<\?php/