Questions tagged [yara]
The yara tag has no usage guidance.
4
questions
0
votes
1answer
161 views
Detecting cracked Themida packed malware
I'm working in a large SOC and my manager has tasked me with finding some way to provide coverage for Themida packed malware samples.
As alluring as it is to suggest just blacklisting all Themida ...
0
votes
0answers
90 views
Using yara to obtain information from binary (not matching)
I would like to use yara to extract information from a binary.
I went through the doc but did not understand how to always get a certain piece of information. For example:
import "dotnet"
rule ...
5
votes
3answers
572 views
Is there any websites to get malware files using YARA rules?
I want to know, Is there any websites which has malware files (Windows OS) that are detected by YARA rules?
Note: I know some websites to get android malware samples using YARA.
But, I need Windows ...
0
votes
1answer
339 views
How do I make a YARA signature that does NOT look in the resource section?
I'm trying to use YARA to sort out a variety of files into families. Some malware drops other malware from images within their resource images. What I'd like to do is write a signature that ignores ...
