Answer the question
In order to leave comments, you need to log in
How to use hash function in yara64.exe?
Hello,
the task is to do a hash search,
according to the link https://cyberdefenses.com/yara-hashing-magic/
import "hash"
rule REALNOTEPAD {
meta:
description = "REAL NOTEPAD"
condition:
filesize < 3KB and
hash.md5(0, filesize) == "698D51A19D8A121CE581499D7B701668"
}
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question