Win32 Greenp Virus Detection

This YARA rule detects the Greenp virus by looking for specific byte sequences within the Portable Executable (PE) file. It checks for two distinct bodies of code ($greenp_body_1 and $greenp_body_2) and requires that $greenp_body_1 is present at the entry point of the PE file. The rule also verifies that the file starts with the MZ header (0x5A4D), indicating a valid Windows executable.