libfaad2_pan_pow_2_30_posflt32_32_big_160_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libfaad2_pan_pow_2_30_pos__flt32___32_big_160_ (No description metadata provided).

rule libfaad2_pan_pow_2_30_pos__flt32___32_big_160_ {
  strings:
    $a0 = { 3f 80 00 00 3f 80 00 00 3f 80 00 00 3f 80 00 00 3f 80 00 00 3f 80 7d ff 3f 80 7d ff 3f 80 fc 7a 3f 80 fc 7a 3f 80 fc 7a 3f 80 fc 7a 3f 80 fc 7a 3f 81 fa e6 3f 82 7a d8 3f 82 7a d8 3f 81 7b 72 3f 81 fa e6 3f 82 fb 48 3f 84 7f 90 3f 85 01 fd 3f 81 fa e6 3f 82 fb 48 3f 84 7f 90 3f 86 8c 47 3f 87 95 97 3f 82 7a d8 3f 83 fd a4 3f 86 8c 47 3f 89 27 84 3f 8a be 19 3f 82 fb 48 3f 85 84 ea 3f 88 a1 07 3f 8b cf c3 3f 8e 85 31 3f 83 fd a4 3f 87 10 a3 3f 8a be 19 3f 8e 85 31 3f 92 66 9d }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

ccffbc2b-b7b4-4c98-8f8e-72a339442be4

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion