mixed mode

rule:
  meta:
    name: mixed mode
    namespace: runtime
    authors:
      - michael.hunhoff@mandiant.com
    description: file contains managed and unmanaged (native) code, often seen in .NET
    scopes:
      static: file
      dynamic: unsupported  # requires characteristic features
  features:
    - or:
      - characteristic: mixed mode