libfaad2_pan_pow_2_30_negflt32_32_lil_160_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libfaad2_pan_pow_2_30_neg__flt32___32_lil_160_ (No description metadata provided).

rule libfaad2_pan_pow_2_30_neg__flt32___32_lil_160_ {
  strings:
    $a0 = { 00 00 80 3f 00 00 80 3f 00 00 80 3f 00 00 80 3f 00 00 80 3f f9 04 7f 3f f9 04 7f 3f e8 0a 7e 3f e8 0a 7e 3f e8 0a 7e 3f e8 0a 7e 3f e8 0a 7e 3f a5 19 7c 3f 71 22 7b 3f 71 22 7b 3f cd 11 7d 3f a5 19 7c 3f 30 2c 7a 3f 10 4f 77 3f 8f 5c 76 3f a5 19 7c 3f 30 2c 7a 3f 10 4f 77 3f 9a 8a 73 3f 0a ae 71 3f 71 22 7b 3f 80 42 78 3f 9a 8a 73 3f ce e9 6e 3f ad 2d 6c 3f 30 2c 7a 3f fb 6a 75 3f fa d4 6f 3f 62 5f 6a 3f 0d eb 65 3f 80 42 78 3f f0 9b 72 3f ad 2d 6c 3f 0d eb 65 3f e8 d2 5f 3f }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

04ed3e41-e9a5-4e0c-a8ab-36f96e33cfec

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion