libfaad2_pow2_tabflt64_64_lil_520_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libfaad2_pow2_tab__flt64___64_lil_520_ (No description metadata provided).

rule libfaad2_pow2_tab__flt64___64_lil_520_ {
  strings:
    $a0 = { 00 00 00 00 00 00 f0 3f 63 80 77 3e 9a 2c f0 3f 76 85 15 d3 b0 59 f0 3f c6 9b 75 18 45 87 f0 3f 10 89 f9 6c 58 b5 f0 3f a1 d1 d3 32 ec e3 f0 3f 52 5b 12 d0 01 13 f1 3f e1 2d a9 ae 9a 42 f1 3f 7c 51 7d 3c b8 72 f1 3f 75 cb 6f eb 5b a3 f1 3f a8 b9 68 31 87 d4 f1 3f d7 8c 62 88 3b 06 f2 3f 3a 62 75 6e 7a 38 f2 3f de 7c e2 65 45 6b f2 3f e3 de 1f f5 9d 9e f2 3f 0a 03 e4 a6 85 d2 f2 3f 15 b7 31 0a fe 06 f3 3f ff 16 64 b2 08 3c f3 3f cb a9 3a 37 a7 71 f3 3f f7 9f e5 34 db a7 f3 3f 22 34 12 4c a6 de f3 3f 2a 2e f7 21 0a 16 f4 3f 2c 89 61 60 08 4e f4 3f cf 3c c1 b5 a2 86 f4 3f 29 2a 36 d5 da bf f4 3f a5 2c 9d 76 b2 f9 f4 3f 81 4f 9d 56 2b 34 f5 3f da 27 b5 36 47 6f f5 3f 2b 54 48 dd 07 ab f5 3f 4a 21 ad 15 6f e7 f5 3f 85 55 3a b0 7e 24 f6 3f 24 22 55 82 38 62 f6 3f cc 3b 7f 66 9e a0 f6 3f 2f 1a 65 3c b2 df f6 3f 76 5f ec e8 75 1f f7 3f c9 67 42 56 eb 5f f7 3f 85 01 eb 73 14 a1 f7 3f 63 4e cf 36 f3 e2 f7 3f 14 ce 4c 99 89 25 f8 3f eb 92 44 9b d9 68 f8 3f dc a0 2a 42 e5 ac f8 3f 36 77 15 99 ae f1 f8 3f e7 c5 cd b0 37 37 f9 3f 50 4e de 9f 82 7d f9 3f 8f f0 a3 82 91 c4 f9 3f 66 e5 5d 7b 66 0c fa 3f 5d 25 3e b2 03 55 fa 3f bd fd 79 55 6b 9e fa 3f ad d3 5a 99 9f e8 fa 3f fd 15 4f b8 a2 33 fb 3f 47 5e fb f2 76 7f fb 3f d1 c1 4b 90 1e cc fb 3f 9e 52 85 dd 9b 19 fc 3f 4a d1 57 2e f1 67 fc 3f 68 90 ef dc 20 b7 fc 3f 7d 89 07 4a 2d 07 fd 3f 85 a4 fb dc 18 58 fd 3f 87 32 db 03 e6 a9 fd 3f 5f 9b 7b 33 97 fc fd 3f f8 3f 8b e7 2e 50 fe 3f d8 90 a4 a2 af a4 fe 3f 25 5a 61 ee 1b fa fe 3f 3f 45 6e 5b 76 50 ff 3f d8 90 9e 81 c1 a7 ff 3f 00 00 00 00 00 00 00 40 }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

c9653291-6092-4a3d-8e98-3b37dc1607ac

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion