]> granicus.if.org Git - file/commitdiff
new yara magic from Christoph Biedl
authorChristos Zoulas <christos@zoulas.com>
Sun, 30 Oct 2016 00:38:01 +0000 (00:38 +0000)
committerChristos Zoulas <christos@zoulas.com>
Sun, 30 Oct 2016 00:38:01 +0000 (00:38 +0000)
magic/Magdir/yara [new file with mode: 0644]
magic/Makefile.am

diff --git a/magic/Magdir/yara b/magic/Magdir/yara
new file mode 100644 (file)
index 0000000..471b495
--- /dev/null
@@ -0,0 +1,17 @@
+
+
+#------------------------------------------------------------------------------
+# $File: map,v 1.4 2015/08/10 05:18:27 christos Exp $
+# yara:  file(1) magic for http://virustotal.github.io/yara/
+#
+
+0      string  YARA
+>4     lelong  >2047
+>8     byte    <20     YARA 3.x compiled rule set
+# version
+>>8    clear
+>>8    byte    6       created with version 3.3.0
+>>8    byte    8       created with version 3.4.0
+>>8    byte    11      created with version 3.5.0
+>>8    default x
+>>>8   byte    x       development version 0x%02x
index c6cc6b0cf74263c2b13e6d1bc0a95ddc05147458..9495f6a01dc5a2421714e91c40297866f6079e30 100644 (file)
@@ -1,5 +1,5 @@
 #
-# $File: Makefile.am,v 1.119 2016/10/17 12:13:19 christos Exp $
+# $File: Makefile.am,v 1.120 2016/10/17 19:52:29 christos Exp $
 #
 MAGIC_FRAGMENT_BASE = Magdir
 MAGIC_DIR = $(top_srcdir)/magic
@@ -285,6 +285,7 @@ $(MAGIC_FRAGMENT_DIR)/xenix \
 $(MAGIC_FRAGMENT_DIR)/xilinx \
 $(MAGIC_FRAGMENT_DIR)/xo65 \
 $(MAGIC_FRAGMENT_DIR)/xwindows \
+$(MAGIC_FRAGMENT_DIR)/yara \
 $(MAGIC_FRAGMENT_DIR)/zfs \
 $(MAGIC_FRAGMENT_DIR)/zilog \
 $(MAGIC_FRAGMENT_DIR)/zyxel