Cornflake Go Stub Rat Binary
Detects CornFlake RAT Go stub/standalone build artifacts: requires the Go-compiled size/entropy heuristic to co-occur with a localized high-entropy PE section consistent with an XOR-encrypted embedded C2 config, and with absence of the standard main.main symbol consistent with garble-style symbol obfuscation, rather than matching on size/entropy alone
YARA
