Gibon Ransomware Detection

This YARA rule detects the Gibon ransomware by identifying specific byte patterns related to remote server connections and encryption loops within executable files. The rule requires the presence of a standard Windows PE header (MZ) and a combination of byte sequences indicative of Gibon's network communication and file encryption routines.