YARA_DEMO.zip file contains following files:
-
graph.pdf : A sample pdf file.
-
pdf_EXE_check : file contains YARA rule for PDF and EXE (PE) file detection.
-
wannacry.exe: wannacry malware sample.
-
KKNPP_Dtrack_check: file contains YARA rule for KKNPP dtrack malware detection.
-
pefile_demo.py: python code extract magic number from exe file.
-
yara-3.11.0: Directory for Yara installation.
-
KKNPP_Dtrack_malware.bin: Dtrack malware sample.
-
wannacry_check: file contains YARA rule for wannacry detection.
-
yara-3.11.0.tar.gz: tar file for yara-3.11.0 directory.
-
YARA_KKNPP_Dtrack.py:
python code for KKNPP malware detection using YARA rules. This program takes KKNPP_Dtrack_malware.bin (any malware file) as input and generates output. -
YARA_wannacry.py:
python code for wannacry malware detection using YARA rules. This program takes wannacry.exe (any malware file) as input and generates output. -
YARA_PDF_EXE_Check.py:
python code for PDF and EXE files detection using YARA rules. This program takes EXE and PDF (any file) as input and generates output.