Skip to content

Add support for YARA v4.3.0 #245

@MatejKastak

Description

@MatejKastak
  • Added a not operator for bytes in hex strings. Example: {01 ~02 03}
  • for statement can iterate over sets of literal strings (e.g. for any s in ("a", "b"): (pe.imphash() == s))
  • of statement can be used with at (e.g. any of them at 0)
  • Add parsing of .NET user types from .NET metadata stream in "dotnet" module
  • Improve certificate parsing and validation in "pe" module
  • Add telfhash() function to "elf" module
  • Add to_int() and to_string() functions to "math" module
    • NOTE: to_int() functions are in the string module instead

For more information see the original release notes:
https://github.com/VirusTotal/yara/releases/tag/v4.3.0

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions