sharvilshah/is_pdf.yar

Created September 19, 2023 13:31

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Select an option

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/sharvilshah/89844f2c020adaf4591b354d5da698a3.js"></script>
Save sharvilshah/89844f2c020adaf4591b354d5da698a3 to your computer and use it in GitHub Desktop.

Download ZIP

test yara rule

Raw

	rule pdf
	{
	strings:
	$a = {25 50 44 46 2D}

	condition:
	$a
	}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment