libfaad2_Phi_Fract_Qmfflt32_32_big_512_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libfaad2_Phi_Fract_Qmf__flt32___32_big_512_ (No description metadata provided).

rule libfaad2_Phi_Fract_Qmf__flt32___32_big_512_ {
  strings:
    $a0 = { 3f 51 72 43 3f 13 33 8b be 87 1a 5e 3f 76 ed 3c bf 7f 35 f9 3d a0 af 2a be d2 b2 03 bf 69 51 ba 3f 37 d7 20 bf 32 27 57 3f 65 e5 23 3e e1 3f b5 bd e0 bc 62 3f 7e 74 3a bf 78 ed 3c 3e 6f 0c 4d bf 0c 8c c2 bf 55 f7 79 3f 19 b5 24 bf 4c b8 22 3f 74 ae da 3e 96 8c 74 3d 40 f2 b2 3f 7f b7 3f bf 6c 83 5e 3e c3 ef 15 bf 2c 4a 8c bf 3d 58 77 3e ef 94 7f bf 62 3e 77 3f 7d 72 31 3e 10 48 6a 3e 4f a7 79 3f 7a ae 59 bf 5a 46 a0 3f 05 c2 77 bf 47 ca 4a bf 20 0f e7 3e a5 d8 81 bf 72 32 a6 3f 7f f7 ea bc 80 ac a2 3e b4 fa a8 3f 6f 79 43 bf 42 a9 f7 3f 26 42 3a bf 5e 5e a3 be fd ac c2 3e 30 0e 2f bf 7c 30 20 3f 7c 30 20 be 30 0e 2f 3e fd ac c2 3f 5e 5e a3 bf 26 42 3a 3f 42 a9 f7 bf 6f 79 43 be b4 fa a8 3c 80 ac a2 bf 7f f7 ea 3f 72 32 a6 be a5 d8 81 3f 20 0f e7 3f 47 ca 4a bf 05 c2 77 3f 5a 46 a0 bf 7a ae 59 be 4f a7 79 be 10 48 6a bf 7d 72 31 3f 62 3e 77 be ef 94 7f 3f 3d 58 77 3f 2c 4a 8c be c3 ef 15 3f 6c 83 5e bf 7f b7 3f bd 40 f2 b2 be 96 8c 74 bf 74 ae da 3f 4c b8 22 bf 19 b5 24 3f 55 f7 79 3f 0c 8c c2 be 6f 0c 4d 3f 78 ed 3c bf 7e 74 3a 3d e0 bc 62 be e1 3f b5 bf 65 e5 23 3f 32 27 57 bf 37 d7 20 3f 69 51 ba 3e d2 b2 03 bd a0 af 2a 3f 7f 35 f9 bf 76 ed 3c 3e 87 1a 5e bf 13 33 8b bf 51 72 43 3f 13 33 8b bf 51 72 43 3f 76 ed 3c 3e 87 1a 5e 3d a0 af 2a 3f 7f 35 f9 bf 69 51 ba 3e d2 b2 03 bf 32 27 57 bf 37 d7 20 3e e1 3f b5 bf 65 e5 23 3f 7e 74 3a 3d e0 bc 62 3e 6f 0c 4d 3f 78 ed 3c bf 55 f7 79 3f 0c 8c c2 bf 4c b8 22 bf 19 b5 24 3e 96 8c 74 bf 74 ae da 3f 7f b7 3f bd 40 f2 b2 3e c3 ef 15 3f 6c 83 5e bf 3d 58 77 3f 2c 4a 8c }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

63d0c5c9-f5f7-4ace-845b-1268cd5064c6

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion