Create simple YARA signature from malicious and clean samples