Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

undefined identifier "is__elf" #433

Open
rocco-96 opened this issue Jan 3, 2023 · 1 comment
Open

undefined identifier "is__elf" #433

rocco-96 opened this issue Jan 3, 2023 · 1 comment
Labels

Comments

@rocco-96
Copy link

rocco-96 commented Jan 3, 2023

Hello.
I have created a python script to integrate the rules if this repository and running them on some samples.

I already changed the relative path of the "index.yar" as it shown [VirusTotal/yara-python/issues/112] with the absolute path.

However, when I run the script I got another error:
yara.SyntaxError: rules/rules-master/malware/MALW_Torte_ELF.yar(31): undefined identifier "is__elf"

I saw this error in another issue #323, but to me does not work.

From what I've understood, the script can include the rules "000_common_rules.yar" (otherwise it would return an error), so it should work.

Desktop:

  • OS: [Ubuntu]
  • Version [22.04.1 LTS]
  • Yara version [4.1.3]
  • Yara - python version [4.2.3]
@rocco-96 rocco-96 added the bug label Jan 3, 2023
@KRUXLEX
Copy link

KRUXLEX commented Jan 13, 2023

Hi,
If you want I was detect issue. Some dude delete definition of this rule: 0897926
This contains more of files.
You must add this manually. I think he want move it to independent module (Utils_MISC) but in utils don't have file like this and include on each file for this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants