Mnemonic
The module matches assembly code executed by the sample
Fields
Field name |
Required |
Variables |
Regex |
Type |
---|---|---|---|---|
instructions |
True |
False, ? allowed |
False |
List[str] |
Example
{
module: "Mnemonic",
instructions: [
"push rax", "?", "mov rax, rsp"
]
}