Win32_Virus_Negt Malware Detection

This rule detects the Win32_Virus_Negt malware based on specific byte patterns found within the Portable Executable (PE) file. It checks for these patterns either at the entry point of the PE file or across multiple sections of the file, indicating the presence of the Negt virus body and its infector components.