Issues with wildcarding

[r0ny123]

Both comment and wildcard option are checked but the wildcard option is not working with the new version of Hyara.

[hyuunnn]

Unfortunately, wildcard option is not currently implemented. :(

[r0ny123]

Oh. Any ETA?

[hyuunnn]

I can't update because I'm currently busy.
It will be updated steadily.

If you have an idea or a feature you need, tell me.
Pull requests are also welcome.

[r0ny123]

Sorry for late reply. As for feature I think this will be a great integration to Hyara. That script has multiple options for generating yara signatures. Specially the Position Independent Code (PIC) mode is a solid one.

[hyuunnn]

@r0ny123 Thanks. I will check this project :)

[hyuunnn]

@r0ny123 Added a feature to modify the values to wildcards.
wildcard option is not yet :(

[r0ny123]

Nice, thanks @hyuunnn. But did you implement this https://github.com/MITRECND/malchive/blob/main/malchive/utilities/gensig.py as discussed earlier #15 (comment)?

[hyuunnn]

@r0ny123 Nope.
I will study the source code.

[hyuunnn]

https://github.com/c3rb3ru5d3d53c/binlex
https://github.com/g-les/YARA-PE-Features
https://github.com/g-les/floss2yar
https://github.com/schrodyn/steezy
https://github.com/fxb-cocacoding/yara-signator
https://github.com/TcM1911/zig2yar
https://github.com/fox-it/mkYARA
https://github.com/immortalp0ny/yarg
https://github.com/ald3ns/copy-as-yara
https://github.com/mbrengel/yarix - https://www.usenix.org/system/files/sec21-brengel.pdf

https://github.com/DissectMalware/yaradbg-backend
https://github.com/DissectMalware/yaradbg-frontend