plusvic/yara — pull request #191 by wxsBSD (2014-10-23 03:45:32+00:00)
Title: Authenticode

Add support for parsing X509 certificates from Authenticode signatures.