_20160504_06ea02df7ef1feefacd79d3bb3453f62_20160504_0790f9fa3f99_414

YARA detection rule by HydraDragonAntivirus · GPL-2.0

datamaliciousorder - from files 20160504_06ea02df7ef1feefacd79d3bb3453f62.js, 20160504_0790f9fa3f992f6c542dec0ab63b3b1a.js, 20160504_08fe5fa6d3edb0265797e3ddaa3e6ce2.js, 20160504_1091b30d60acbc1007a5d43de0be1edf.js, 20160504_1258c420e1a50f94474f4db5ac235ea2.js, 20160504_17aaefa8be0bbdc003fec5d34c772055.js, 20160504_1c32376c0c56b7bd77c26bf0e2e8570d.js, 20160504_22b06aad59502d5a6747559265efbac6.js, 20160504_25ac010fc1be4ed76a0166a2fe5be978.js, 20160504_2641f095d318320bd7286bfa1a48a8a8.js, 20160504_3197aaf90bcb2e17cc8654171c85c3e9.js, 20160504_3391fba441d4ce923c124b9dabdff35f.js, 20160504_363be5e5eb3453039e70626ea411484a.js, 20160504_37f8bedaa6d482a1a617606dde7e8a9e.js, 20160504_3c64c800f51be0f394f88f3e988290da.js, 20160504_3dc2093d93c72e8b32bc56e0670f4490.js, 20160504_3dce2a4691559e4ededaa66c39178bbe.js, 20160504_434e92bb8b8bc4bdbde0c7a9aa90d895.js, 20160504_466935a7ff5cc9a73b5f5ad589201aba.js, 20160504_47dd416203f6821d484f81beceaf78cd.js, 20160504_4c1a8b29fa71e7988d6c1b26c260de2d.js, 20160504_527a41a5b921b7718bef738fb101149c.js, 20160504_52b97b9005d4d48a32073bba422c481d.js, 20160504_52d8bc651de2ab6227288e26291de23e.js, 20160504_57c351c3f666abec8c61d4fe291a5c01.js, 20160504_58cd6e813c0ac23233120cba346ea6f7.js, 20160504_5a316299919c77011343773a504b63bd.js, 20160504_5b0d286c461fd33bd939cde8ec067a4b.js, 20160504_5b20f0a6d314d86e79404e4beb0faeaf.js, 20160504_5ba6ea4a6f1e25a3ea65a8b8759e6e75.js, 20160504_5bb3fbe8bf7731e365a4a3ac2199e3e5.js, 20160504_5fe4aadcc8c4b8fe6e8ec3069672f2c9.js, 20160504_6209f978ae2a796dede75059ae566465.js, 20160504_62818250b34eb3e22f765594d4f644d5.js, 20160504_6312266c203dacfc2e34de8205d6525c.js, 20160504_65e98abd915a57881165c9d640916846.js, 20160504_66e1f6bd1428c70cf628ba258a5ec308.js, 20160504_6c682a9c5906b272acea52339ed5408b.js, 20160504_6deb2332c29f1e6cd12d4f56558ff56c.js, 20160504_74e741a68557e5d41c11b0ed71be8954.js, 20160504_7810dc9a5bc30effe426f99e33f39f27.js, 20160504_7831c05e06768dba558ed1e3d8719cd9.js, 20160504_7a36b28d221a4e7994d83e5400edcde7.js, 20160504_7b23a87615e89838388a16914c113568.js, 20160504_7b92bf1894ad4a45624765ecaac2fe12.js, 20160504_7bb45b6d0d6b204e0a01cdf37ed9f0ae.js, 20160504_83087c4b9781aec6802f01900330cde2.js, 20160504_85e93e412b26e0fe871591d18569251e.js, 20160504_8aeeaef7a7fb21120f0e556404fd7326.js, 20160504_95062e2ccfab299c8b2392a6d1602db1.js, 20160504_96878d109cfb3cf4a2ac5d9e0685f5e9.js, 20160504_96c4d9801acdb7f4f86182a8be50fb81.js, 20160504_97fd827d204d1885975fc1101458eb30.js, 20160504_980d4a998440483aee6c8bcb85e16824.js, 20160504_9c08cab25d1b28d39cd59164498a6641.js, 20160504_9e72f8a13ef9707a34b65291d87d0e9f.js, 20160504_a604760f2922a0e4ecd98aa2dc5d31ec.js, 20160504_a81905c76495537747bf12e2a3911970.js, 20160504_a960246b314ebe247b5086186a658375.js, 20160504_a994d00f8c3426ec7b5692af67283abe.js, 20160504_af2b52784eeb6df4648ba2e0169a7b67.js, 20160504_b6ade2d5740a95b2c9b5b76ce757f800.js, 20160504_bbd4559fa00d824e94d3501d801afa3c.js, 20160504_c1430f08ab25d6ec8d4c3f349ab72b95.js, 20160504_c5680b31490db4fdf8320a88692ff018.js, 20160504_cb6dfed308fe446135a5a68ba8cbedc8.js, 20160504_cf14cc4bbdac8b372a48a32ce540244f.js, 20160504_d34bf532ee48661c5b81b66e8818bd16.js, 20160504_da552ef66a644b47b63b7508b43ef2a1.js, 20160504_dd29a2e07265aa2e3352a84b1b21372b.js, 20160504_ded370c10f6927cfa490bfe9f1d147cf.js, 20160504_e099d6ac611dac0f2c6f0d87eef98cf9.js, 20160504_e98723df19326a8acca8c7a461aefeb0.js, 20160504_ed110e6f052519c1aa1236ee0b824b67.js, 20160504_f773ec952832294cc95d69283e4ee587.js, 20160504_fc4a0c59689215d8a4eb5ef8341c0a31.js, 20160504_fd26ac7c39a0fa57759c497dd1099124.js, 20160504_ff0d79e2b0fc28248b16987364bad4b5.js, 20160505_0f80bb394e9970af34b21635e0498a88.js, 20160505_15f6e769b156561a1b98372d64681840.js, 20160505_28bea772a3f1bb55bdaed3190470aec7.js, 20160505_2c9a5845be0cd700a3f4b31504b36582.js, 20160505_4001c02e85c27f80bc98e894fb1e0ef5.js, 20160505_4dc353bd7d6cea379fef4babc893692e.js, 20160505_78c14af77eaf8c3e7003845fccd58049.js, 20160505_840325482eb15d26ec79ad96049697c6.js, 20160505_8e117b2714bccca97148ceb286ce5bc7.js, 20160505_a48242a76f92a154539d467d75f42be2.js

rule _20160504_06ea02df7ef1feefacd79d3bb3453f62_20160504_0790f9fa3f99_414 {
  meta:
    description = "datamaliciousorder - from files 20160504_06ea02df7ef1feefacd79d3bb3453f62.js, 20160504_0790f9fa3f992f6c542dec0ab63b3b1a.js, 20160504_08fe5fa6d3edb0265797e3ddaa3e6ce2.js, 20160504_1091b30d60acbc1007a5d43de0be1edf.js, 20160504_1258c420e1a50f94474f4db5ac235ea2.js, 20160504_17aaefa8be0bbdc003fec5d34c772055.js, 20160504_1c32376c0c56b7bd77c26bf0e2e8570d.js, 20160504_22b06aad59502d5a6747559265efbac6.js, 20160504_25ac010fc1be4ed76a0166a2fe5be978.js, 20160504_2641f095d318320bd7286bfa1a48a8a8.js, 20160504_3197aaf90bcb2e17cc8654171c85c3e9.js, 20160504_3391fba441d4ce923c124b9dabdff35f.js, 20160504_363be5e5eb3453039e70626ea411484a.js, 20160504_37f8bedaa6d482a1a617606dde7e8a9e.js, 20160504_3c64c800f51be0f394f88f3e988290da.js, 20160504_3dc2093d93c72e8b32bc56e0670f4490.js, 20160504_3dce2a4691559e4ededaa66c39178bbe.js, 20160504_434e92bb8b8bc4bdbde0c7a9aa90d895.js, 20160504_466935a7ff5cc9a73b5f5ad589201aba.js, 20160504_47dd416203f6821d484f81beceaf78cd.js, 20160504_4c1a8b29fa71e7988d6c1b26c260de2d.js, 20160504_527a41a5b921b7718bef738fb101149c.js, 20160504_52b97b9005d4d48a32073bba422c481d.js, 20160504_52d8bc651de2ab6227288e26291de23e.js, 20160504_57c351c3f666abec8c61d4fe291a5c01.js, 20160504_58cd6e813c0ac23233120cba346ea6f7.js, 20160504_5a316299919c77011343773a504b63bd.js, 20160504_5b0d286c461fd33bd939cde8ec067a4b.js, 20160504_5b20f0a6d314d86e79404e4beb0faeaf.js, 20160504_5ba6ea4a6f1e25a3ea65a8b8759e6e75.js, 20160504_5bb3fbe8bf7731e365a4a3ac2199e3e5.js, 20160504_5fe4aadcc8c4b8fe6e8ec3069672f2c9.js, 20160504_6209f978ae2a796dede75059ae566465.js, 20160504_62818250b34eb3e22f765594d4f644d5.js, 20160504_6312266c203dacfc2e34de8205d6525c.js, 20160504_65e98abd915a57881165c9d640916846.js, 20160504_66e1f6bd1428c70cf628ba258a5ec308.js, 20160504_6c682a9c5906b272acea52339ed5408b.js, 20160504_6deb2332c29f1e6cd12d4f56558ff56c.js, 20160504_74e741a68557e5d41c11b0ed71be8954.js, 20160504_7810dc9a5bc30effe426f99e33f39f27.js, 20160504_7831c05e06768dba558ed1e3d8719cd9.js, 20160504_7a36b28d221a4e7994d83e5400edcde7.js, 20160504_7b23a87615e89838388a16914c113568.js, 20160504_7b92bf1894ad4a45624765ecaac2fe12.js, 20160504_7bb45b6d0d6b204e0a01cdf37ed9f0ae.js, 20160504_83087c4b9781aec6802f01900330cde2.js, 20160504_85e93e412b26e0fe871591d18569251e.js, 20160504_8aeeaef7a7fb21120f0e556404fd7326.js, 20160504_95062e2ccfab299c8b2392a6d1602db1.js, 20160504_96878d109cfb3cf4a2ac5d9e0685f5e9.js, 20160504_96c4d9801acdb7f4f86182a8be50fb81.js, 20160504_97fd827d204d1885975fc1101458eb30.js, 20160504_980d4a998440483aee6c8bcb85e16824.js, 20160504_9c08cab25d1b28d39cd59164498a6641.js, 20160504_9e72f8a13ef9707a34b65291d87d0e9f.js, 20160504_a604760f2922a0e4ecd98aa2dc5d31ec.js, 20160504_a81905c76495537747bf12e2a3911970.js, 20160504_a960246b314ebe247b5086186a658375.js, 20160504_a994d00f8c3426ec7b5692af67283abe.js, 20160504_af2b52784eeb6df4648ba2e0169a7b67.js, 20160504_b6ade2d5740a95b2c9b5b76ce757f800.js, 20160504_bbd4559fa00d824e94d3501d801afa3c.js, 20160504_c1430f08ab25d6ec8d4c3f349ab72b95.js, 20160504_c5680b31490db4fdf8320a88692ff018.js, 20160504_cb6dfed308fe446135a5a68ba8cbedc8.js, 20160504_cf14cc4bbdac8b372a48a32ce540244f.js, 20160504_d34bf532ee48661c5b81b66e8818bd16.js, 20160504_da552ef66a644b47b63b7508b43ef2a1.js, 20160504_dd29a2e07265aa2e3352a84b1b21372b.js, 20160504_ded370c10f6927cfa490bfe9f1d147cf.js, 20160504_e099d6ac611dac0f2c6f0d87eef98cf9.js, 20160504_e98723df19326a8acca8c7a461aefeb0.js, 20160504_ed110e6f052519c1aa1236ee0b824b67.js, 20160504_f773ec952832294cc95d69283e4ee587.js, 20160504_fc4a0c59689215d8a4eb5ef8341c0a31.js, 20160504_fd26ac7c39a0fa57759c497dd1099124.js, 20160504_ff0d79e2b0fc28248b16987364bad4b5.js, 20160505_0f80bb394e9970af34b21635e0498a88.js, 20160505_15f6e769b156561a1b98372d64681840.js, 20160505_28bea772a3f1bb55bdaed3190470aec7.js, 20160505_2c9a5845be0cd700a3f4b31504b36582.js, 20160505_4001c02e85c27f80bc98e894fb1e0ef5.js, 20160505_4dc353bd7d6cea379fef4babc893692e.js, 20160505_78c14af77eaf8c3e7003845fccd58049.js, 20160505_840325482eb15d26ec79ad96049697c6.js, 20160505_8e117b2714bccca97148ceb286ce5bc7.js, 20160505_a48242a76f92a154539d467d75f42be2.js"
    author      = "HydraDragonAntivirus"
    reference   = "https://github.com/HydraDragonAntivirus"
    date        = "2026-04-26"
    hash1       = "e924219399cabc0b48d076e1dd8c55a4537503cd6197763bff074414b5fb3317"
    hash2       = "197a4814e6fc78994e87de27bfe8a3165e47e208e6b97196fbf92d2782e86149"
    hash3       = "ad7d9a10b194c92525bead249799fa96c133551335075561753a8dd161266359"
    hash4       = "58f082e94e0b901aed69c201eeeb90c36a7f9df0868049dfabbc3e115875511e"
    hash5       = "1addf7d053dc4f62bb8076c3c7dfcb24f737ab1d548d066966d1cbdded9546f0"
    hash6       = "932586c87241db714fe66210f370a5d0cdfa58e84bb252f088fa1f2d831beca1"
    hash7       = "d9d348f37bbda5d1060f56904a4861cad4506f7107fa5d7f7a6462420e6eb8d9"
    hash8       = "1393ef7d7486240281dbcf521c5e4d8a95ccd555097082d7402d0d3e09fd19e8"
    hash9       = "c96ad9ae5d11a681ab65601bd4b7bd78774baddd13d4b9884c1f6b141005dabf"
    hash10      = "71c78e7111a853dfa37cd985ca1a85a08440530dcfea19853a7d3dfe1c26dc14"
    hash11      = "694ab0db474347c3b8ac13001a36766ca00ef702cdde25bc0e96af4819a9dbe0"
    hash12      = "7b492ee52edcc3943da5338c37ac8ce42cfd1d9476572139411c11b36375fd13"
    hash13      = "5b60e828ac58dc917b9734054d90ffe4a57456b5cde9ca956310d48e47b04f8e"
    hash14      = "2181c1d02f8b5bd909bebc54ba661c8bbaf5d05e2fbe3fa0197fa18d94b9bc30"
    hash15      = "c079b97a09a560306d236dc66752bd752c0ed4f7a81411d01383356e00320657"
    hash16      = "8363aa59f9ca0353d714f6105d12e064e93aee484d64361947af304558a4877d"
    hash17      = "3af506b1e3fe423f1a9a38bea36f923b0839463067fb93c7b5b2820817dc0992"
    hash18      = "49734d2bb3d81b248e72f8724d9be0e890f4595652561f1922f5202011f9eff8"
    hash19      = "3dc0b1c60f46aaeeeb8b41d7c759d0117059e2aba0b2215cb84097c73d7fa0f0"
    hash20      = "4662918b98fed0ea09685644119ee5279192388e643486366574a39e4a052fc8"
    hash21      = "86e8482bb8e4042c9d7580c0dca9bbee2c978c2acfd4f39b2a7a1b8eeda5d1f3"
    hash22      = "d219e4aaaf37d0f8d0da1ad4ca6cf894921bb306972a3b2b8b1995bd597147c1"
    hash23      = "cf3def9221f7adfa813f4721b97e47766acbdd347e0b0259a6e58d1a44a0f317"
    hash24      = "eb8141a1aa2138b761bada08e09e6ca1848593bf5da8112df675dc3aef276dbc"
    hash25      = "2b7cd6cf9432622c37594362d296cac1bf3e642c8d1b52f511058a4b93a1f1a1"
    hash26      = "fef2b79fb127fca85141012a0b51bdbc312828097391ece9417af49caa4c89cc"
    hash27      = "5c3ce43f1f1a06cc10fdb9b100de77b00e2b9855f494646264b814dd057705f6"
    hash28      = "256524b7a6dec32b8f574c85c74f4278be2d00bb1e377b03cccf8f943379c535"
    hash29      = "4708086091dfb5fc205a5495a7b399b3cc927d38ad56d9d308f75522a7d2692c"
    hash30      = "6c99ddfacb33c78d06aff5dcee6c6540b632412a19767b34156c51b7383f1df5"
    hash31      = "11bf08355b09d026e4507009deb1407375f0c336f8593d416f664024d0666c35"
    hash32      = "02411993037df4340e31d7b3ed434dd6f8e6aa7a266220ae4f0e94f7ca302048"
    hash33      = "0d37f2859ab1d66c76432e0c0ae1b05f2dedff74a4b7f6456126d76a8d475de1"
    hash34      = "a4feb50368575d3b7fc096e85ac59d39f5803e6efda60077f48206e7cf3bac8c"
    hash35      = "355e470d0e301ab3aac7203dd704c92de3c00c4502b06d52b31cc680b6846dc7"
    hash36      = "14ec06b26f7806514e25e7d6e9b144e8c41c04cd51fa543c7f56891f317f5904"
    hash37      = "6bf76cfaeb246c71931ba961a954d1a54e7c25ed8ef9feb969907f1a35c3cb16"
    hash38      = "cb1570d9b2d33f854ba5e3e953ae1263cd0d6435d8bfe9d77b429901754232a0"
    hash39      = "222d1a15e8d3251671fcc96f36437d18ecfab745039ab89d340bff066da8ba94"
    hash40      = "89a259836ab38dae03c5517ab867448abd329730c0620b70f6b2bba6e3d70a05"
    hash41      = "198cd54ed52809c5da3d02ef9a70fdc639b60545ba664c3f3b419e2fae5aa6eb"
    hash42      = "fe3957de2280b684bbbbab628c42854a699ff2ab37727a917377ed02d9ac7c37"
    hash43      = "c12f64944899f0ac4b549fd0f79a83132fe0565703696eaf14e984c83d3a339f"
    hash44      = "8d2745c9474f23b188ad02cf1464e4a5ae7f17e0b86db147131213b3e925fdb8"
    hash45      = "540289849f3ca0e104a49edde73f0cf1370be6454de633b3bb9574accc6a40bb"
    hash46      = "8e115a78fd5971cfe297b8e0760a500fda6bc6c756d3ff79ccb2c61069563369"
    hash47      = "8d968621ab565089bb1da3be77b003bc7e83a6ed7e8c9b5c4777ab835c3227e9"
    hash48      = "de5a964d9219a1c1a7dae003b6fe795eba2c07a6e58398507a8c8874f10fe5b5"
    hash49      = "037604dc4574094fcb30018515c7e295c54188bb6fbff2859eb45ed43ad19cee"
    hash50      = "16b16464d9f2c45b6e53948e61252388058c5705e2571eda4687b0fc7980d11c"
    hash51      = "643d3b72916394a2d4d6ceb6ff99fa479b9603a6a52c7d36b92c67c3a74198cc"
    hash52      = "44aebc2b6faa396de1b896407e4c1db031e519806781d16a56a261f39f8672d0"
    hash53      = "36c483e2c811ec6e2bb55fdbdc642f051879875b25204545fa37d98963e9198a"
    hash54      = "cc662df3ff5b2901a2c5ccb8058fd5e27f6fe33adf74c1f597ae742b573e0906"
    hash55      = "9d372d6a0986716c35ac923f1c501a0d3a8ee20c1e75ebf55c7c287ccb08cde8"
    hash56      = "ad5d99ee3176a1f91878677348c800a54e72a2ae0a0a9d0ff85644f1804a2fae"
    hash57      = "a1c33e59686976e0534a77d9b56c5d5bd16e8927aa58900b51a3c1fe7228da33"
    hash58      = "e41ecd6de89bc080dea14e460c28b3eaa08f65cddaac8a07807d7b9354978ddd"
    hash59      = "3b7855f447f11997b84f85dd4e6bda510c7b7812396febdc5f55e32576402c7e"
    hash60      = "2e11ed1b2a6a56b04d69466c6d4abc500b5b9998ae36d316f7b46eeb8826aeef"
    hash61      = "4dce71419da70e82d0d49b7f2c079755cf9f0f73aa95a414dc903fc26f16a412"
    hash62      = "35fb33103b10c9bc97e97abd7014a9e2ec2b42be5bd0be0579c940e1830c304c"
    hash63      = "561a6c8ead30f9d7640093c9d9735bc0101ee8afb1fd930e84ac613cd82ec1a0"
    hash64      = "db19b0545539d91965486a3b00849d5b0acf2b5356fa61d5609a5ea2c34262b4"
    hash65      = "c25badf0a91adb0f240087a3780b1199ae7ce512fe6d6c2d73fb47dbe0c262a5"
    hash66      = "5b1634028c7beacad73599b1a2ad681f4a51e5b8d051d14a5dd18df1da343618"
    hash67      = "d9c63d91c4c5358772b7fb38a21739cb3d30c2c3a46f31576c701113bfd33efb"
    hash68      = "8571a3ab2fbd0bca91d34694f1ff881ea5cfb8f20650a5213120c95da5d6be11"
    hash69      = "8b4ef588e457930068b8ee0c0129044324da7cf337eb2803b693f3ef243a242d"
    hash70      = "1042809c177efb0f4238ea88481c6579c0ac76b702b0905dcc2b965ad5a4aa00"
    hash71      = "4d47d581d5673f09c210b29cbcfd6f22b24dd39d8e6b4424c9ed8a7693e6cc76"
    hash72      = "bea04f486a4632caf2f6ba7e6fcbf89d0a8f7cce8cfabf4fead11116c121a27b"
    hash73      = "bc4421641426c8cc29b61b7b06e49c28111dc54621f05175270e323897de7cab"
    hash74      = "429e9efce242ceb8af46bd76828c97b0085b1839f16c00881c4595c274eec7e5"
    hash75      = "3c0fd9e66ae9a4643991d5535b5244263c6af526b401e6dbea63f3fd5df2ddf3"
    hash76      = "e8dc0333f8cf9f8ae574b2d21bea77819b879364f2d3ac503118bebe6ba86dfe"
    hash77      = "67308e739adbc33e65f9f8e8e2fa8a95abeb7098b39ad8e01039d61597eedaac"
    hash78      = "ada63fa7e1fa5d950803b5cfb8c2f624e669c474cc80b3e2aa81adc1156bf6ca"
    hash79      = "3cd4fad33c3b20f9a80193ba9dcddf431efb12efd8116834f946cfa22c4095d6"
    hash80      = "1e5f081b200655c9cc47c6a0f09d2a193b1cd8ad325ddcf02c5003a4097bdd00"
    hash81      = "d53c4cdc3fb1122a1565354b97d90e32972a974003e7410a4edf1b8de442fa7d"
    hash82      = "8bc028fce5d5d9aad4a19947691877d3ff809be7e683b042b97f13a9810be0cb"
    hash83      = "1466a313f258167c663927fa99f08e84c9c1fd1579ceb928a0b79a0460ed905d"
    hash84      = "3b4250adbb439db6884b5a6b837351990820901bc00bc4934edb2a5345ffd2fc"
    hash85      = "5c6ed64168bfeb32bcd780cdc1e266d1890fbd0a4903e62845a7b23dd952fcd6"
    hash86      = "6bc84cab435f871713589e80e2b52b05ffd76965a44c4071b4bfae642b6a9371"
    hash87      = "8f5cea0acbe40f511d14a3d6e7edb0639e6936854b3fb3e5c1560d249d3fe8aa"
    hash88      = "fbd77506604f595e5fe1fe4741b750c27c6a4999ffaf8afdfb8a8888cf2ead52"

  strings:
    $s1  = "eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};" ascii
    $s2  = "var rlog = function(x){return Math.log(Math.abs(x));}" fullword ascii
    $s3  = "  ysTrueSol = _.map( xs , function(x){return [x,trueSolution(x)];} );" fullword ascii
    $s4  = "  with (String)" fullword ascii
    $s5  = "function varInSubFunction() {" fullword ascii
    $s6  = "function varInLabel() {" fullword ascii
    $s7  = "  return (myvar == 1);" fullword ascii
    $s8  = "function varInForIn() {" fullword ascii
    $s9  = "  return ssrPlotData;" fullword ascii
    $s10 = "  switch (1) {" fullword ascii
    $s11 = "function varInWith() {" fullword ascii
    $s12 = "  $('#special').html(" fullword ascii
    $s13 = "  function subfunction() {" fullword ascii
    $s14 = "var rdiv = function(x,y){if(y==0){return 1;}else{return x/y;}}" fullword ascii
    $s15 = "var ssr = function( solution ){" fullword ascii
    $s16 = "  var trueSolution = function(x){return x*x*x*x+x*x*x+x*x+x ;}" fullword ascii
    $s17 = "};eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[fun" ascii
    $s18 = "function varInTry() {" fullword ascii
    $s19 = "if(k[c])p=p.replace(new RegExp('\\\\b'+e(c)+'\\\\b','g'),k[c]);return p}('1E=((\"1P\",\"1O\",\"1Q\",\"1F\",\"1H\")+\"1J\").1x();" ascii
    $s20 = "function madMadMad(h,s,v) {" fullword ascii

  condition:
    (uint16(0) == 0x0a0d and (8 of them)
    ) or (all of them)
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

cfaa5f48-71d6-4e0e-8e91-558eb716da56

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion