Mnemonic

The module matches assembly code executed by the sample

Fields

Field name

Required

Variables

Regex

Type

instructions

True

False, ? allowed

False

List[str]

Example

{
    module: "Mnemonic",
    instructions: [
        "push rax", "?", "mov rax, rsp"
    ]
}