libfaad2_cfft_tab_128flt32_32_lil_1024_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libfaad2_cfft_tab_128__flt32___32_lil_1024_ (No description metadata provided).

rule libfaad2_cfft_tab_128__flt32___32_lil_1024_ {
  strings:
    $a0 = { 00 00 80 3f 00 00 00 00 0f b1 7f 3f 30 fb 48 3d 6d c4 7e 3f 36 bd c8 3d ac 3a 7d 3f 83 40 16 3e be 14 7b 3f c2 c5 47 3e f8 53 78 3f cd cf 78 3e 0b fa 74 3f 31 a0 94 3e 08 09 71 3f d4 7c ac 3e 5e 83 6c 3f 16 ef c3 3e d8 6b 67 3f 80 e8 da 3e 97 c5 61 3f ea 5a f1 3e 1a 94 5b 3f 3d 9c 03 3f 31 db 54 3f da 39 0e 3f 02 9f 4d 3f c0 7f 18 3f 03 e4 45 3f 9a 67 22 3f f9 ae 3d 3f 4a eb 2b 3f f3 04 35 3f f3 04 35 3f 49 eb 2b 3f fa ae 3d 3f 99 67 22 3f 03 e4 45 3f c0 7f 18 3f 02 9f 4d 3f d9 39 0e 3f 32 db 54 3f 3c 9c 03 3f 1b 94 5b 3f e7 5a f1 3e 98 c5 61 3f 81 e8 da 3e d8 6b 67 3f 15 ef c3 3e 5e 83 6c 3f d3 7c ac 3e 08 09 71 3f 30 a0 94 3e 0b fa 74 3f c8 cf 78 3e f8 53 78 3f bc c5 47 3e bf 14 7b 3f 85 40 16 3e ac 3a 7d 3f 35 bd c8 3d 6d c4 7e 3f 29 fb 48 3d 0f b1 7f 3f 2e bd 3b b3 00 00 80 3f 41 fb 48 bd 0f b1 7f 3f 41 bd c8 bd 6d c4 7e 3f 8a 40 16 be ac 3a 7d 3f c2 c5 47 be be 14 7b 3f cd cf 78 be f8 53 78 3f 33 a0 94 be 0a fa 74 3f d6 7c ac be 08 09 71 3f 18 ef c3 be 5e 83 6c 3f 80 e8 da be d8 6b 67 3f ed 5a f1 be 97 c5 61 3f 3d 9c 03 bf 1a 94 5b 3f dc 39 0e bf 30 db 54 3f c1 7f 18 bf 02 9f 4d 3f 99 67 22 bf 04 e4 45 3f 4b eb 2b bf f8 ae 3d 3f f3 04 35 bf f3 04 35 3f fb ae 3d bf 48 eb 2b 3f 04 e4 45 bf 99 67 22 3f 04 9f 4d bf bd 7f 18 3f 32 db 54 bf d9 39 0e 3f 1a 94 5b bf 3d 9c 03 3f 99 c5 61 bf e6 5a f1 3e d8 6b 67 bf 7f e8 da 3e 60 83 6c bf 10 ef c3 3e 09 09 71 bf d2 7c ac 3e 0b fa 74 bf 33 a0 94 3e f8 53 78 bf c5 cf 78 3e bf 14 7b bf c1 c5 47 3e ac 3a 7d bf 7a 40 16 3e 6d c4 7e bf 30 bd c8 3d 0f b1 7f bf fd fa 48 3d 00 00 80 3f 00 00 00 00 6d c4 7e 3f 36 bd c8 3d be 14 7b 3f c2 c5 47 3e 0b fa 74 3f 31 a0 94 3e 5e 83 6c 3f 16 ef c3 3e 97 c5 61 3f ea 5a f1 3e 31 db 54 3f da 39 0e 3f 03 e4 45 3f 9a 67 22 3f f3 04 35 3f f3 04 35 3f 99 67 22 3f 03 e4 45 3f d9 39 0e 3f 32 db 54 3f e7 5a f1 3e 98 c5 61 3f 15 ef c3 3e 5e 83 6c 3f 30 a0 94 3e 0b fa 74 3f bc c5 47 3e bf 14 7b 3f 35 bd c8 3d 6d c4 7e 3f 00 00 80 3f 00 00 00 00 be 14 7b 3f c2 c5 47 3e 5e 83 6c 3f 16 ef c3 3e 31 db 54 3f da 39 0e 3f f3 04 35 3f f3 04 35 3f d9 39 0e 3f 32 db 54 3f 15 ef c3 3e 5e 83 6c 3f bc c5 47 3e bf 14 7b 3f 2e bd 3b b3 00 00 80 3f c2 c5 47 be be 14 7b 3f 18 ef c3 be 5e 83 6c 3f dc 39 0e bf 30 db 54 3f f3 04 35 bf f3 04 35 3f 32 db 54 bf d9 39 0e 3f 60 83 6c bf 10 ef c3 3e bf 14 7b bf c1 c5 47 3e 00 00 80 3f 00 00 00 00 0b fa 74 3f 31 a0 94 3e 31 db 54 3f da 39 0e 3f 99 67 22 3f 03 e4 45 3f 15 ef c3 3e 5e 83 6c 3f 35 bd c8 3d 6d c4 7e 3f c2 c5 47 be be 14 7b 3f ed 5a f1 be 97 c5 61 3f f3 04 35 bf f3 04 35 3f 97 c5 61 bf ed 5a f1 3e bf 14 7b bf c1 c5 47 3e 6d c4 7e bf 47 bd c8 bd 5e 83 6c bf 15 ef c3 be 05 e4 45 bf 98 67 22 bf d6 39 0e bf 34 db 54 bf 2d a0 94 be 0b fa 74 bf 00 00 80 3f 00 00 00 00 5e 83 6c 3f 16 ef c3 3e f3 04 35 3f f3 04 35 3f 15 ef c3 3e 5e 83 6c 3f 00 00 80 3f 00 00 00 00 f3 04 35 3f f3 04 35 3f 2e bd 3b b3 00 00 80 3f f3 04 35 bf f3 04 35 3f 00 00 80 3f 00 00 00 00 15 ef c3 3e 5e 83 6c 3f f3 04 35 bf f3 04 35 3f 5e 83 6c bf 15 ef c3 be 00 00 80 3f 00 00 00 00 00 00 80 3f 00 00 00 00 00 00 80 3f 00 00 00 00 2e de 4c 32 00 00 80 bf }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

d17e9e17-f811-46b1-b78b-4af0bd408653

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion