-
Notifications
You must be signed in to change notification settings - Fork 42
Open
Labels
Description
Yaramod do not add modifiers to hexstring.
Example code:
import yaramod
string = yaramod.YaraHexStringBuilder(0x58)
print(
yaramod.YaraRuleBuilder()
.with_name('asd')
.with_hex_string('$asd', string.get())
.private()
.get().text
)
It will print something like this:
rule asd {
strings:
$asd = { 58 }
condition:
true
}
But it should print string with modifier
rule asd {
strings:
$asd = { 58 } private
condition:
true
}