Commit 8da2f1be by Jaume Martin Committed by GitHub

Update base64.yar Fix #153

parent 52a7fc0c
...@@ -2,8 +2,11 @@ rule contentis_base64 : Base64 ...@@ -2,8 +2,11 @@ rule contentis_base64 : Base64
{ {
meta: meta:
author = "Jaume Martin" author = "Jaume Martin"
description = "This rule finds for base64 strings"
version = "0.2"
notes = "https://github.com/Yara-Rules/rules/issues/153"
strings: strings:
$a = /([A-Za-z0-9+\/]{4})*([A-Za-z0-9+\/]{2}==|[A-Za-z0-9+\/]{3}=)?/ $a = /([A-Za-z0-9+\/]{4}){3,}([A-Za-z0-9+\/]{2}==|[A-Za-z0-9+\/]{3}=)?/
condition: condition:
$a $a
} }
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment