libaf_front_same_side__30_degree_flt32_32_big_512_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libaf_front_same_side__30_degree___flt32___32_big_512_ (No description metadata provided).

rule libaf_front_same_side__30_degree___flt32___32_big_512_ {
  strings:
    $a0 = { bb 87 ad b5 3b bd c1 e1 3b 59 82 2f 3c 69 96 cd 3b f0 23 6e bd 86 26 de 3d 0f 73 80 bc 56 79 df 3e 80 e9 01 3e d7 6f 3b be af 0b 9c be 79 8f 33 3d 48 c2 72 be 36 13 65 3e 87 69 ee 3e 6e 07 e6 3d 07 62 bc 3e ef ac 68 3f 09 32 7c bc 43 2b 5e be cb 96 ba bd 0d 3d e7 3c f1 37 7a be c5 2b 0c be a7 8b 10 be 16 8a e5 bd ae 88 8b be 18 f4 0f bd c1 2e 05 3d ca ff 73 3c 35 73 f8 bb a7 3c 83 3d bf 43 6e 3e 09 a5 1e 3d d7 31 63 3d 2d ad 4b 3d 86 55 77 3c dd 0d cd bd 09 9e 8a bc 93 75 26 3d 2c 29 8e 3d 1d a8 1b bc c8 c5 a0 bd 0b 96 3d bc ef 74 26 bd 40 5e 3b bd c1 b4 84 be 1c 66 8c be 1d d0 87 bd b3 70 70 bd 09 b8 d9 bb ec 15 fb 3c 07 8d 42 3c af 0d 73 3d 32 db 35 3d 67 de ea 3d 8a c4 52 3d 66 45 b4 3d 12 7b 83 3c cc de 1e 3c 7c b4 27 3c 01 7c ab bb b0 87 f6 bb e4 fb 38 bc 45 10 f9 bc ce ab 8a bc d6 d6 01 bc c3 0b b5 bd 05 20 86 bd 02 e5 4e bc 92 36 43 bc 88 41 3e bc 84 95 6c bc 3f 09 19 bb 67 db 4b ba 0f ce 96 3a f1 99 be 3c 3e a0 13 3c 96 30 5a 3c a7 81 43 3c 0b 64 74 39 f6 1b cd ba df 70 ae bb 12 dc 52 ba 61 91 4f bb 86 b6 32 bb 67 33 64 bc 1d f1 c4 bc 8f 5d 18 bc 7f cf 4d bc 30 c8 a8 bc 1c 29 61 bb f4 c4 91 ba fb 7b 79 b9 1d 0c 72 bb 43 52 8b bb d5 aa 7c 38 12 dd 36 3c 17 78 c0 3c 22 26 bc 3c 08 42 f5 3b 95 eb 9f b8 87 c6 1a bb 93 8d 34 bb 8a 79 f1 bb 3d 23 48 bb d2 44 4e bb ea 81 ff bc 10 d6 cc bc 6c 37 f4 bc 7c e6 83 bc 17 77 ce bb 0d 5f 58 3b 3b 0b 63 3b 33 4a af ba 4e ad 75 bb 55 f9 a9 bb 7e 4b 40 bb 67 5b 13 bb 7c 85 06 ba 9c 42 5c bb 07 cf 5f bb a3 5c 28 bb 8a db 38 bb 46 99 03 ba b9 9c af ba 05 3f 9c 39 b8 02 59 }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

8eec1aa7-5f11-4566-a37a-df3a84878733

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion