Skip to content

YARA v3.2.0

Compare
Choose a tag to compare
@plusvic plusvic released this 10 Nov 15:24
· 2456 commits to master since this release
  • ELF module
  • Hash module
  • New features in PE module
  • Big-endian version of intXX and uintXX functions
  • Modules can declare dictionary objects
  • Modules accept overloaded functions
  • Performance improvements
  • BUGFIX: "and" operator not working properly with integer operands
  • BUGFIX: False positive with strings declared as "fullword wide ascii"
  • BUGFIX: False positive with "wide fullword" strings shorter than 5 bytes
  • BUGFIX: Functions declared in a structure array not working properly
  • BUGFIX: "contains" operator causing segfault if operand is an undefined string

Refer to the documentation for information on how to build and install YARA.