search

Yara-Rules / rules

Repository of yara rules
GNU General Public License v2.0
4.12k stars 999 forks source link

undefined identifier "is__elf" #433

Open rocco-96 opened 1 year ago

rocco-96 commented 1 year ago

Hello. I have created a python script to integrate the rules if this repository and running them on some samples.

I already changed the relative path of the "index.yar" as it shown [VirusTotal/yara-python/issues/112] with the absolute path.

However, when I run the script I got another error: yara.SyntaxError: rules/rules-master/malware/MALW_Torte_ELF.yar(31): undefined identifier "is__elf"

I saw this error in another issue #323, but to me does not work.

From what I've understood, the script can include the rules "000_common_rules.yar" (otherwise it would return an error), so it should work.

Desktop:

KRUXLEX commented 1 year ago

Hi, If you want I was detect issue. Some dude delete definition of this rule: https://github.com/Yara-Rules/rules/commit/0897926ed74e38915dc03cf5c320049737c23800 This contains more of files. You must add this manually. I think he want move it to independent module (Utils_MISC) but in utils don't have file like this and include on each file for this.