libaf_rear_opposite_side___135_degree_flt32_32_lil_512_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libaf_rear_opposite_side___135_degree___flt32___32_lil_512_ (No description metadata provided).

rule libaf_rear_opposite_side___135_degree___flt32___32_lil_512_ {
  strings:
    $a0 = { 77 06 00 39 c0 bf b6 b7 b0 63 c3 36 bf 4e 4c b7 da 6b 80 b8 4d 09 bb 36 b9 00 4f b8 d5 fe 9d 35 66 74 78 b8 61 71 1f 37 39 b4 1c b9 47 70 00 39 08 29 ca b8 69 ed c9 36 cf a6 0c 38 9b 88 4a b9 5d 0c 06 3a 5f cf 14 ba 1d 09 9e 3a 4f a4 75 3a 01 9e 96 3b f2 d4 f6 ba 18 7d 06 bc 24 35 7a 3b ab f9 0e 3c 76 7c 88 3d 42 08 8b 3d 57 01 38 bd c6 a7 24 bd cd a7 d6 3c 3b 1a 60 3c 30 dd 6a bc 6a 29 26 3c 24 bb ec 3d 94 72 22 3e b2 a8 75 3d 47 15 99 3b c2 04 01 3d 8e ec 6a 3c cf a8 71 bc 22 63 a8 bc be 7f 5d bd 62 14 9f bd d9 fd 4d bd c3 61 fc bc 1e 58 0b bd da 05 fa bc 2b 22 68 bc 2f 18 43 3c 2b 10 6a 3c 14 fa d0 3b 82 ef 97 3c 23 cf e7 3c 14 9f ce 3c ec a9 b3 3c 8c 74 a1 3c 2e a9 8d 3c 7b 19 8f 3c c8 66 1f 3c a3 19 43 bb e9 ca 1c bc 1d 1a 84 bc 6b 5c f0 bc b3 51 29 bd d5 53 32 bd 80 17 1e bd 39 1a e4 bc b0 9b 9b bc da 86 52 bc 5f 68 91 bb 41 d2 94 39 73 85 77 3b a7 35 04 3c 0b 9a 0f 3c 21 6a 03 3c 24 d1 df 3b 6b 61 11 3b 9a 35 06 bb dc fc 82 bb 51 8c e7 bb 00 26 1a bc 7c 39 33 bc f5 ed 40 bc c1 a1 3a bc 29 71 2d bc ab 43 21 bc 93 0e fe bb 1c 85 ba bb db 36 d5 bb a0 2e af bb 60 39 80 bb 65 87 6c bb ac 39 05 bb 2f 0a 3c 39 5b d3 56 3b 39 14 82 3b be 4b 05 3b 0e f1 ed b8 99 70 f0 ba 9c 18 69 bb 07 b5 8b bb 8e b6 40 bb f4 0e 61 bb f1 5f c5 bb 8f cf fd bb 41 a2 01 bc cf dd cc bb 7b ed ad bb 38 82 b6 bb 3b d8 98 bb 41 62 77 bb e3 d3 88 bb 92 af 98 bb 35 1f a4 bb 5c 03 9b bb e5 14 5f bb c1 44 e0 ba 4f b2 1f ba 7f 64 d2 ba a5 1c 59 bb fb a2 93 bb 5d 0f 88 bb 16 ef 52 bb 91 c4 32 bb 09 ca e0 ba e5 04 a5 ba 4d dd f2 ba d3 7b 26 bb }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

ed44b764-3baa-4cb5-b1a5-a81e3b1a40c0

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion