YARA v3.2.0
- ELF module
- Hash module
- New features in PE module
- Big-endian version of intXX and uintXX functions
- Modules can declare dictionary objects
- Modules accept overloaded functions
- Performance improvements
- BUGFIX: "and" operator not working properly with integer operands
- BUGFIX: False positive with strings declared as "fullword wide ascii"
- BUGFIX: False positive with "wide fullword" strings shorter than 5 bytes
- BUGFIX: Functions declared in a structure array not working properly
- BUGFIX: "contains" operator causing segfault if operand is an undefined string
Refer to the documentation for information on how to build and install YARA.