rule Adwind_JAR_PACKB {
	meta:
		author = "Vitaly Kamluk, Vitaly.Kamluk@kaspersky.com"
		last_modified = "2015-11-30"
	strings:
		$c1 = "META-INF/MANIFEST.MF"
		$c2 = "main/Start.class"
		$a1 = "config/config.perl"
		$b1 = "java/textito.isn"
	condition:
		int16(0) == 0x4B50 and ($c1 and $c2 and ($a1 or $b1))
}