Bufu1003

Yara cuckoo module not hitting on any report attributes

7

Sample rule ``` import "cuckoo" import "math" import "pe" rule testing { condition: cuckoo.sync.mutex(/Global\\3a886eb8-fe40-4d0a-b78b-9e0bcb683fb7/) } ``` Running from command line using the following command: `yara -x cuckoo=cuckoo/reports/report.json myrulesFile.yar badSample.exe` This...

adding hex string to rule

1

Is there a workaround at the moment for adding a string of bytes to a rule in Yara's format? Looked around in documentation/examples and I haven't found anything. - Eg:...