Added yara rule for PDFs