The pattern matching swiss knife for malware researchers (and everyone else)
YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a boolean expression which determine its logic.
- Implement the --no-follow-symlinks option in Windows (6e11b5a).
- BUGFIX: Revert YR_RE_SCAN_LIMIT back to 4096 (#2177).
- BUGFIX: infinite loop while parsing corrupt resource directory in PE module (#2162).
- BUGFIX: improved detection whether a string requires all matches (#2167).
- BUGFIX: Heap overflow while loading hand-crafted compiled rules (#2178). Thanks to Momoko Shiraishi
for the report.
Contributors: @secDre4mer @PeterMatula @wxsBSD
| Publisher | VirusTotal |
|---|---|
| Version | 4.5.5 |
| Release date | 2025-10-30 |
| License | BSD-3-Clause |
| Installer type | zip |
| Architecture | x86, x64 |
| Package ID | VirusTotal.YARA |
Install YARA from the command line with Windows Package Manager (winget):
winget install --id=VirusTotal.YARA -e
USB malware removal tool for Windows
Comprehensive cybersecurity solution
Powerful free network optimiser and encryptor
Free, lightweight software to protect PCs
Automatically extract obfuscated strings from malware.
YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor.
Free and powerful security tool
Reliable protection for every user