libavcodec_mpc_SCFflt32_32_big_512_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule libavcodec_mpc_SCF__flt32___32_big_512_ (No description metadata provided).

rule libavcodec_mpc_SCF__flt32___32_big_512_ {
  strings:
    $a0 = { 43 99 aa 3f 43 7f ff ff 43 55 3e 38 43 31 a0 99 43 13 f5 cb 42 f6 7e f0 42 cd 53 87 42 ab 08 67 42 8e 77 90 42 6d 58 36 42 45 b4 15 42 24 ae e3 42 09 2d 8a 41 e4 88 76 41 be 5d 16 41 9e 91 b8 41 84 15 c8 41 5c 0c 74 41 37 4b d8 41 18 ae a8 40 fe 5c dc 40 d3 e1 16 40 b0 7d c7 40 93 03 8c 40 74 eb 5e 40 4c 03 5c 40 29 f0 61 40 0d 8e 4e 3f eb d3 9d 3f c4 70 63 3f a3 a1 41 3f 88 4c f0 3f 63 12 49 3f 3d 25 67 3f 1d 8e 18 3f 03 3d 85 3e da a4 2b 3e b6 1f bc 3e 97 b4 ab 3e 7c bc 63 3e 52 86 2c 3e 2f 5c ce 3e 12 12 d7 3d f3 5a 5b 3d ca b5 53 3d a8 da 23 3d 8c a6 89 3d 6a 51 7f 3d 43 2e c2 3d 22 95 58 3d 07 6d c6 3c e1 9e 80 3c bb ef b7 3c 9c 8c 21 3c 82 66 a4 3c 59 3e 30 3c 34 f5 8b 3c 16 bc 48 3b fb 1e 96 3b d1 2d 7c 3b ae 3d af 3b 91 23 ac 3b 71 cb ea 3b 49 69 6e 3b 27 c5 ad 3b 0b c0 40 3a e8 d1 d9 3a c1 ef 30 3a a1 8b 26 3a 86 90 0a 3a 60 2d 1a 3a 3a bc 03 3a 1b 8b d1 3a 01 91 23 39 d7 da 80 39 b3 cd 43 39 95 c5 7c 39 79 83 6e 39 4f d6 ff 39 2d 20 66 39 10 36 09 38 f0 40 05 38 c8 1f a9 38 a6 b2 fb 38 8a db 6f 38 67 54 a6 38 40 b1 a8 38 20 82 a6 38 05 b3 b7 37 de be 0d 37 b9 8a 44 37 9a 8d 23 37 80 bc fe 37 56 79 13 37 32 a6 dd 37 14 d0 42 36 f7 ea e4 36 ce 82 b1 36 ac 04 ef 36 8f 49 ea 36 6e b6 a6 36 46 d7 fd 36 25 a2 0a 36 09 f8 14 35 e5 d9 e2 35 bf 76 27 35 9f 7b d7 35 84 d8 cd 35 5d 51 59 35 38 5a 7a 35 19 90 16 34 ff d4 6a 34 d5 19 ea 34 b1 82 5b 34 93 dc 9a 34 76 54 f8 34 4d 30 91 34 2a eb 48 34 0e 5f 4e 33 ed 2f cd 33 c5 92 6c 33 a4 92 d9 33 89 16 2e 33 64 61 8c 33 3e 3c ac 33 1e 76 b8 33 03 ff 4b 32 db e6 fd }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

1415a51a-5aec-40b9-9929-9e92943d1e55

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion