/Yara-Rules

Useful Yara rules that I made/use.

Primary LanguageYARAGNU General Public License v3.0GPL-3.0

Yara-Rules

Useful Yara rules that I made/use

Yara Info

Documentation: https://virustotal.github.io/yara/

Source code: https://github.com/virustotal/yara

Official download/release: https://github.com/virustotal/yara/releases

Usage

Example of using Yara (command line):

yara64 --print-meta --print-strings --print-stats rules\upx.yara apps\app.exe

Personally I use Yara with ImHex (hex editor/viewer) by putting all .yar files in "C:\Program Files\ImHex\yara"

It should look like this when a condition is met (using ImHex):
image

ImHex Info

Documentation: https://github.com/WerWolv/ImHex/wiki/Pattern-Language-Guide

Source code: https://github.com/WerWolv/ImHex

Official download/release: https://github.com/WerWolv/ImHex/releases