aboutsummaryrefslogtreecommitdiffstats
path: root/lualib/lua_scanners/oletools.lua
diff options
context:
space:
mode:
authorCarsten Rosenberg <c.rosenberg@heinlein-support.de>2019-01-26 10:28:51 +0100
committerCarsten Rosenberg <c.rosenberg@heinlein-support.de>2019-01-26 10:28:51 +0100
commit532901848a31e533b4e8e14b34254dd43f005497 (patch)
tree3f07c67bf14aafa28c63863959ce7dbaa96e2582 /lualib/lua_scanners/oletools.lua
parent193fc0d39126ed23c6fb622c8301aa1f7847ad5f (diff)
downloadrspamd-532901848a31e533b4e8e14b34254dd43f005497.tar.gz
rspamd-532901848a31e533b4e8e14b34254dd43f005497.zip
[Minor] lua_scanners - oletools - complete threats in extended mode
Diffstat (limited to 'lualib/lua_scanners/oletools.lua')
-rw-r--r--lualib/lua_scanners/oletools.lua4
1 files changed, 2 insertions, 2 deletions
diff --git a/lualib/lua_scanners/oletools.lua b/lualib/lua_scanners/oletools.lua
index f0fdd82b4..577b79863 100644
--- a/lualib/lua_scanners/oletools.lua
+++ b/lualib/lua_scanners/oletools.lua
@@ -167,8 +167,8 @@ local function oletools_check(task, content, digest, rule)
m_autoexec = 'A'
table.insert(analysis_keyword_table, a.keyword)
elseif a.type == 'Suspicious' then
- if rule.extended == true then m_suspicious = 'S' end
- if a.keyword ~= 'Base64 Strings' and a.keyword ~= 'Hex Strings'
+ if rule.extended == true or
+ (a.keyword ~= 'Base64 Strings' and a.keyword ~= 'Hex Strings')
then
m_suspicious = 'S'
table.insert(analysis_keyword_table, a.keyword)