libavcodec_mpc_SCFflt32_32_lil_512_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libavcodec_mpc_SCF__flt32___32_lil_512_ (No description metadata provided).

rule libavcodec_mpc_SCF__flt32___32_lil_512_ {
  strings:
    $a0 = { 3f aa 99 43 ff ff 7f 43 38 3e 55 43 99 a0 31 43 cb f5 13 43 f0 7e f6 42 87 53 cd 42 67 08 ab 42 90 77 8e 42 36 58 6d 42 15 b4 45 42 e3 ae 24 42 8a 2d 09 42 76 88 e4 41 16 5d be 41 b8 91 9e 41 c8 15 84 41 74 0c 5c 41 d8 4b 37 41 a8 ae 18 41 dc 5c fe 40 16 e1 d3 40 c7 7d b0 40 8c 03 93 40 5e eb 74 40 5c 03 4c 40 61 f0 29 40 4e 8e 0d 40 9d d3 eb 3f 63 70 c4 3f 41 a1 a3 3f f0 4c 88 3f 49 12 63 3f 67 25 3d 3f 18 8e 1d 3f 85 3d 03 3f 2b a4 da 3e bc 1f b6 3e ab b4 97 3e 63 bc 7c 3e 2c 86 52 3e ce 5c 2f 3e d7 12 12 3e 5b 5a f3 3d 53 b5 ca 3d 23 da a8 3d 89 a6 8c 3d 7f 51 6a 3d c2 2e 43 3d 58 95 22 3d c6 6d 07 3d 80 9e e1 3c b7 ef bb 3c 21 8c 9c 3c a4 66 82 3c 30 3e 59 3c 8b f5 34 3c 48 bc 16 3c 96 1e fb 3b 7c 2d d1 3b af 3d ae 3b ac 23 91 3b ea cb 71 3b 6e 69 49 3b ad c5 27 3b 40 c0 0b 3b d9 d1 e8 3a 30 ef c1 3a 26 8b a1 3a 0a 90 86 3a 1a 2d 60 3a 03 bc 3a 3a d1 8b 1b 3a 23 91 01 3a 80 da d7 39 43 cd b3 39 7c c5 95 39 6e 83 79 39 ff d6 4f 39 66 20 2d 39 09 36 10 39 05 40 f0 38 a9 1f c8 38 fb b2 a6 38 6f db 8a 38 a6 54 67 38 a8 b1 40 38 a6 82 20 38 b7 b3 05 38 0d be de 37 44 8a b9 37 23 8d 9a 37 fe bc 80 37 13 79 56 37 dd a6 32 37 42 d0 14 37 e4 ea f7 36 b1 82 ce 36 ef 04 ac 36 ea 49 8f 36 a6 b6 6e 36 fd d7 46 36 0a a2 25 36 14 f8 09 36 e2 d9 e5 35 27 76 bf 35 d7 7b 9f 35 cd d8 84 35 59 51 5d 35 7a 5a 38 35 16 90 19 35 6a d4 ff 34 ea 19 d5 34 5b 82 b1 34 9a dc 93 34 f8 54 76 34 91 30 4d 34 48 eb 2a 34 4e 5f 0e 34 cd 2f ed 33 6c 92 c5 33 d9 92 a4 33 2e 16 89 33 8c 61 64 33 ac 3c 3e 33 b8 76 1e 33 4b ff 03 33 fd e6 db 32 }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

7041f731-9b95-4909-bd50-0b444af401d6

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion