0ad7b97af2a13882c8c9a07c2f8b9c03ac235825.yar

rule possible_badger   
   {   
   strings:   
   //mov eax, 0x00   
   // push eax   
   //mov eax, 0x00   
   // push eax   
   //mov eax, 0x00   
   // push eax   
   //mov eax, 0x00   
   // push eax   
   //mov eax, 0x00   
   // push eax   
   //mov eax, 0x00   
   // push eax   
   $code = { B8 00 00 00 00 50 B8 00 00 00 00 50 B8 00 00 00 00 50 B8 00 00 00 00 50 B8 00 00 00 00 50 B8 00 00 00 00 50}   
   condition:   
   all of them   
   }