libfaad2_pow2_tabflt64_64_big_520_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libfaad2_pow2_tab__flt64___64_big_520_ (No description metadata provided).

rule libfaad2_pow2_tab__flt64___64_big_520_ {
  strings:
    $a0 = { 3f f0 00 00 00 00 00 00 3f f0 2c 9a 3e 77 80 63 3f f0 59 b0 d3 15 85 76 3f f0 87 45 18 75 9b c6 3f f0 b5 58 6c f9 89 10 3f f0 e3 ec 32 d3 d1 a1 3f f1 13 01 d0 12 5b 52 3f f1 42 9a ae a9 2d e1 3f f1 72 b8 3c 7d 51 7c 3f f1 a3 5b eb 6f cb 75 3f f1 d4 87 31 68 b9 a8 3f f2 06 3b 88 62 8c d7 3f f2 38 7a 6e 75 62 3a 3f f2 6b 45 65 e2 7c de 3f f2 9e 9d f5 1f de e3 3f f2 d2 85 a6 e4 03 0a 3f f3 06 fe 0a 31 b7 15 3f f3 3c 08 b2 64 16 ff 3f f3 71 a7 37 3a a9 cb 3f f3 a7 db 34 e5 9f f7 3f f3 de a6 4c 12 34 22 3f f4 16 0a 21 f7 2e 2a 3f f4 4e 08 60 61 89 2c 3f f4 86 a2 b5 c1 3c cf 3f f4 bf da d5 36 2a 29 3f f4 f9 b2 76 9d 2c a5 3f f5 34 2b 56 9d 4f 81 3f f5 6f 47 36 b5 27 da 3f f5 ab 07 dd 48 54 2b 3f f5 e7 6f 15 ad 21 4a 3f f6 24 7e b0 3a 55 85 3f f6 62 38 82 55 22 24 3f f6 a0 9e 66 7f 3b cc 3f f6 df b2 3c 65 1a 2f 3f f7 1f 75 e8 ec 5f 76 3f f7 5f eb 56 42 67 c9 3f f7 a1 14 73 eb 01 85 3f f7 e2 f3 36 cf 4e 63 3f f8 25 89 99 4c ce 14 3f f8 68 d9 9b 44 92 eb 3f f8 ac e5 42 2a a0 dc 3f f8 f1 ae 99 15 77 36 3f f9 37 37 b0 cd c5 e7 3f f9 7d 82 9f de 4e 50 3f f9 c4 91 82 a3 f0 8f 3f fa 0c 66 7b 5d e5 66 3f fa 55 03 b2 3e 25 5d 3f fa 9e 6b 55 79 fd bd 3f fa e8 9f 99 5a d3 ad 3f fb 33 a2 b8 4f 15 fd 3f fb 7f 76 f2 fb 5e 47 3f fb cc 1e 90 4b c1 d1 3f fc 19 9b dd 85 52 9e 3f fc 67 f1 2e 57 d1 4a 3f fc b7 20 dc ef 90 68 3f fd 07 2d 4a 07 89 7d 3f fd 58 18 dc fb a4 85 3f fd a9 e6 03 db 32 87 3f fd fc 97 33 7b 9b 5f 3f fe 50 2e e7 8b 3f f8 3f fe a4 af a2 a4 90 d8 3f fe fa 1b ee 61 5a 25 3f ff 50 76 5b 6e 45 3f 3f ff a7 c1 81 9e 90 d8 40 00 00 00 00 00 00 00 }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

91f4915a-cd0f-4153-8b54-df0d642ac121

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion