Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Retrieving XOR key from yara engine #117

Open
Still34 opened this issue Dec 14, 2023 · 0 comments
Open

Retrieving XOR key from yara engine #117

Still34 opened this issue Dec 14, 2023 · 0 comments

Comments

@Still34
Copy link

Still34 commented Dec 14, 2023

Summary

Consider the following yara rule,

rule example {
    strings:
        $xor = "hello world!" xor
    condition:
        any of them
}

When using yara-python, one could fetch the found XOR key from the xor_key property from a StringMatchInstance object. This property does not appear to be passed to the yara wrapper in malduck yet?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Still34