MalwareBazaar Database
This page shows some basic information the YARA rule PE64_Indirect_Table_Stream_Packager including corresponding malware samples.
Database Entry
| YARA Rule: | PE64_Indirect_Table_Stream_Packager |
|---|---|
| Author: | Daydream |
| Description: | Detects x64 PE binaries combining custom indirect dispatch table sections, inline CPUID/RSMB hardware checks, and domain-separated SHA-256 stream framing tables |
| Firstseen: | 2026-11-01 23:41:23 UTC |
| Lastseen: | 2026-11-06 09:55:13 UTC |
| Sightings: | 9 |
Malware Samples
The table below shows all malware samples that matching this particular YARA rule (max 1000).
| Firstseen (UTC) | SHA256 hash | Tags | Signature | Reporter |
|---|