feat: add algorithms

dubfib · Dec 25, 2024 · 2cfc25b · 2cfc25b
1 parent d9158ae
commit 2cfc25b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/certificate/certificate_blocklist.yar b/certificate/certificate_blocklist.yar
@@ -16,6 +16,7 @@ rule certificate_blocklist_2595bcf2c3ae82b63703af36e1256a9a
             pe.signatures[i].issuer contains "SSL.com Code Signing Intermediate CA ECC R2" and
             pe.signatures[i].serial == "25:95:bc:f2:c3:ae:82:b6:37:03:af:36:e1:25:6a:9a" and
             pe.signatures[i].thumbprint == "d8fa17e7682967e78a3110a806d0494f045b163e" and
+            pe.signatures[i].algorithm == "ecdsa-with-SHA384" and
             pe.signatures[i].not_after >= 1766510580
         )
 }
@@ -36,6 +37,7 @@ rule certificate_blocklist_5ab8891e9a0a7996494081ed71f471ee
             pe.signatures[i].issuer contains "Lenovo HelpCentr" and
             pe.signatures[i].serial == "5a:b8:89:1e:9a:0a:79:96:49:40:81:ed:71:f4:71:ee" and
             pe.signatures[i].thumbprint == "5f939042543bc5b5b26ee42d3b2f7cc31c8f6b07" and
+            pe.signatures[i].algorithm == "sha1WithRSAEncryption" and
             pe.signatures[i].not_after >= 2050584840
         ) 
 }