Windows software

YARA

VirusTotal.YARA v4.5.5

The pattern matching swiss knife for malware researchers (and everyone else)

About this app

YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a boolean expression which determine its logic.

Install with Winget

Command line

PS> winget install --id VirusTotal.YARA -e
Official manifest sources

Downloads for version 4.5.5

External links ↗
Installer Details SHA-256 Download
x86 github.com zip
2CC0B3388039629653B2EF581AB2553670F021A88C9B0FE1D0E35151317399F3
Download
x64 github.com zip
352396C8A3D9B31B157A4820ABD3B9347FC934A2314CDDA8A4F566A5570163E4
Download
Version archive

6 older versions

Version 4.5.4
Installer Details SHA-256 Download
x86 github.com zip
ABFDF18969A0D51A8FC48767C46D605F5784A53FAA912D80DDACC3184FD3A3B8
Download
x64 github.com zip
1981616EDDB144D37A5E2B1F27AD80CA436AF4BB0C04ED58E959F5FCD045CC00
Download
Version 4.5.3
Installer Details SHA-256 Download
x86 github.com zip
7048CB64FDC50B273EDAD2AAD2F9224E6027AF991EDE45127D883781014DBCF4
Download
x64 github.com zip
475B3B117DC6130DF2D19A2E866BF2ABC5E62EB058E8AB81FD79F6955ACE3306
Download
Version 4.5.2
Installer Details SHA-256 Download
x86 github.com zip
C7A8584133F4438764B8F247489C0C121B16422FD65B76D7A1A754DA79FE5F25
Download
x64 github.com zip
9F934CC4C5DE653324A5714736077F57667A06009BEE7984D960634AE0662DC6
Download
Version 4.5.1
Installer Details SHA-256 Download
x86 github.com zip
0F2F50ECA621596A070BF0DBD9CA5024956691BC42D5ED1060C748E41B6B0DD4
Download
x64 github.com zip
37878802163BF4429EC2385CCEB0F408B500A11BDD3736DE64639C41DBE1DCA7
Download
Version 4.5.0
Installer Details SHA-256 Download
x86 github.com zip
40B6058C3211DFEDD3CA16DF82F48658686C170F27DEB7118A7F9254375AF2E0
Download
x64 github.com zip
723F6C6A4C972CA0B7536BFCFBEE3FC98AFDE6DA9FBA854D49BE10FFEF50B8C7
Download
Version 4.3.2
Installer Details SHA-256 Download
X64 github.com Zip · None
D878593371A0CDC0946A26E460C3BF0A0964018647A0E2239B1DC25DDC0D2365
Download

Similar software

PE-bear

hasherezade.PE-bear

PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files.

v0.7.2