Merge pull request rednaga#17 from circleous/master

Add DxShield
cys3c · Oct 31, 2016 · 6665d82 · 6665d82
2 parents 3278246 + c17ccf0
commit 6665d82
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/apkid/rules/apk/packers.yara b/apkid/rules/apk/packers.yara
@@ -27,6 +27,20 @@
 
 include "common.yara"
 
+rule dxshield : packer
+{
+  meta:
+    description = "DxShield"
+    // http://www.nshc.net/wp/portfolio-item/dxshield_eng/
+
+  strings:
+    $decryptlib = "libdxbase.so"
+    $res = "assets/DXINFO.XML"
+
+  condition:
+    is_apk and ($decryptlib and $res) 
+}
+
 rule secneo : packer
 {
   meta: