CRC_12_poly_0xf01__16_big_refl_False_

YARA detection rule by HydraDragonAntivirus · GPL-2.0

Rule CRC_12_poly_0xf01__16_big_refl_False_ (No description metadata provided).

rule CRC_12_poly_0xf01__16_big_refl_False_ {
  strings:
    $a0 = { 00 00 0f 01 1e 02 11 03 3c 04 33 05 22 06 2d 07 78 08 77 09 66 0a 69 0b 44 0c 4b 0d 5a 0e 55 0f f0 10 ff 11 ee 12 e1 13 cc 14 c3 15 d2 16 dd 17 88 18 87 19 96 1a 99 1b b4 1c bb 1d aa 1e a5 1f ef 21 e0 20 f1 23 fe 22 d3 25 dc 24 cd 27 c2 26 97 29 98 28 89 2b 86 2a ab 2d a4 2c b5 2f ba 2e 1f 31 10 30 01 33 0e 32 23 35 2c 34 3d 37 32 36 67 39 68 38 79 3b 76 3a 5b 3d 54 3c 45 3f 4a 3e d1 43 de 42 cf 41 c0 40 ed 47 e2 46 f3 45 fc 44 a9 4b a6 4a b7 49 b8 48 95 4f 9a 4e 8b 4d 84 4c 21 53 2e 52 3f 51 30 50 1d 57 12 56 03 55 0c 54 59 5b 56 5a 47 59 48 58 65 5f 6a 5e 7b 5d 74 5c 3e 62 31 63 20 60 2f 61 02 66 0d 67 1c 64 13 65 46 6a 49 6b 58 68 57 69 7a 6e 75 6f 64 6c 6b 6d ce 72 c1 73 d0 70 df 71 f2 76 fd 77 ec 74 e3 75 b6 7a b9 7b a8 78 a7 79 8a 7e 85 7f 94 7c 9b 7d ad 87 a2 86 b3 85 bc 84 91 83 9e 82 8f 81 80 80 d5 8f da 8e cb 8d c4 8c e9 8b e6 8a f7 89 f8 88 5d 97 52 96 43 95 4c 94 61 93 6e 92 7f 91 70 90 25 9f 2a 9e 3b 9d 34 9c 19 9b 16 9a 07 99 08 98 42 a6 4d a7 5c a4 53 a5 7e a2 71 a3 60 a0 6f a1 3a ae 35 af 24 ac 2b ad 06 aa 09 ab 18 a8 17 a9 b2 b6 bd b7 ac b4 a3 b5 8e b2 81 b3 90 b0 9f b1 ca be c5 bf d4 bc db bd f6 ba f9 bb e8 b8 e7 b9 7c c4 73 c5 62 c6 6d c7 40 c0 4f c1 5e c2 51 c3 04 cc 0b cd 1a ce 15 cf 38 c8 37 c9 26 ca 29 cb 8c d4 83 d5 92 d6 9d d7 b0 d0 bf d1 ae d2 a1 d3 f4 dc fb dd ea de e5 df c8 d8 c7 d9 d6 da d9 db 93 e5 9c e4 8d e7 82 e6 af e1 a0 e0 b1 e3 be e2 eb ed e4 ec f5 ef fa ee d7 e9 d8 e8 c9 eb c6 ea 63 f5 6c f4 7d f7 72 f6 5f f1 50 f0 41 f3 4e f2 1b fd 14 fc 05 ff 0a fe 27 f9 28 f8 39 fb 36 fa }

  condition:
    $a0
}

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

751a01e9-f298-43d5-87ba-28f4c6a5102c

Propose edits, view related rules, and engage with the community through comments.

Executable code, not a declarative rule

This submission is arbitrary [[ currentRule.format ? currentRule.format.toUpperCase() : '' ]] code, not a declarative detection rule — review it as you would any script before running it, and note that it cannot be safely aggregated or auto-executed alongside YARA/Sigma/Suricata/CRS rules.

Rejected pattern present

[[ reason ]]

What does this mean?

Format & documentation suggestions

Not a security issue — this rule is valid and was accepted as-is. These are optional fields/conventions its own format recommends, mainly affecting its quality score and how well it documents itself for other reviewers.

[[ reason ]]

What do these messages mean?

[[ currentRule.title && currentRule.title.length > 60 ? currentRule.title.slice(0, 60) + '…' : currentRule.title ]]

[[ currentRule.title ]]

Community Discussion