libaf_center_rear__180_degree_flt32_32_lil_512_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libaf_center_rear__180_degree___flt32___32_lil_512_ (No description metadata provided).

rule libaf_center_rear__180_degree___flt32___32_lil_512_ {
  strings:
    $a0 = { 96 33 7b b8 39 f9 6e b9 b9 6a 8b 39 24 e8 c5 b9 01 0b ee 39 6a 53 dc b9 66 ca 85 39 31 4c 94 39 6c 38 85 ba 88 a9 3b 3b 82 64 0d 3b 22 98 29 3c 86 bb 2b bc 10 39 58 bc ac 3e 51 3b 37 d3 ed 3c 2b 29 27 3e 8a 86 d6 3d 17 51 d6 bd 19 a6 bd bd 08 3a f6 bb cd c2 5e 3c 58 d3 a2 bc 7c 93 00 3e 4c c9 ba 3e a2 40 47 3e 9b 9e 35 bd 52 cd 3e 3d b7 3d c2 3d 2b 86 00 bd 3b e4 d2 bd a6 82 bf bd 6f 53 e7 bd d7 d5 18 be 4d 34 fc bd 85 2f 82 bd 6b ea 5e bd 63 00 9b bd f5 fe be bc 4e 87 2e 3d 80 3d b8 3c c7 c9 a7 3c 9e 7a 67 3d 1b 0d 71 3d 80 87 1b 3d 08 cc 40 3c 5c aa b7 3b e9 83 a5 3b 4b c7 53 bc 89 f1 c3 bc 7d 1d 59 bc 21 39 2f bc 7c 5a fc bc 49 f7 15 bd dd 54 1b bd 61 ce 2c bd 28 df d9 bc 52 e4 1f bc ba 54 07 bb d3 9a 1e bb 67 40 d9 bb 20 63 97 3b f4 56 9f 3c 04 26 8e 3c c0 84 90 3c f9 f5 b9 3c 76 74 9b 3c 69 5e 18 3c 15 2c de ba be 3c dd bb a3 b2 19 bc 6c a3 37 bc 58 68 56 bc 77 b0 87 bc f1 41 b4 bc 92 38 ce bc 36 99 8a bc 0c bf 0d bc a9 5f e5 bb 6e be b2 bb 74 79 0a bb 4e 43 44 39 96 2c 96 b9 e3 e2 e6 3a 0a ea e4 3b 72 4c 2d 3c 9e e1 d3 3b dc 75 c4 ba 67 fd 81 bb a1 81 d5 bb 40 14 19 bc ac 72 fa bb bc 05 90 bb 66 10 48 bb 81 00 e6 bb 1b 99 1f bc 47 8c 02 bc d7 a3 ff bb 72 ee f6 bb 6a 37 68 bb 92 b2 c5 3a 0b 00 19 3b cf a4 83 ba 40 c7 25 bb 17 55 1b bb 2a e1 1a ba 26 78 43 3b ff 3c 9e 3b 18 13 93 3b 0f c6 dd 37 b1 f4 89 bb c0 32 ca bb 44 21 ee bb a3 a8 df bb 01 18 e2 bb 2a d3 f0 bb db 89 1c bc 17 2c 41 bc b5 6b 2e bc 10 e2 d3 bb 1d d3 04 bb b1 62 e3 b9 2f 71 92 ba e1 3e eb ba 17 85 27 bb b3 47 e8 ba 6b 85 79 b9 6d e9 3a 3a }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

6e57d4c5-6649-4260-94a9-30c1db4a22a2

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion