MalwareBazaar Database

This page shows some basic information the YARA rule SUSP_PE_Signed_by_Suspicious_Entitiy_Mar23 including corresponding malware samples.

Database Entry


YARA Rule:SUSP_PE_Signed_by_Suspicious_Entitiy_Mar23
Author:Arnim Rupp (https://github.com/ruppde)
Description:Find driver signed by suspicious company (see references)
Firstseen:2023-05-25 12:32:54 UTC
Lastseen:2025-11-05 08:20:29 UTC
Sightings:12

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter