20 lines
462 B
Text
20 lines
462 B
Text
|
rule SHA512_Constants {
|
||
|
|
meta:
|
||
|
|
author = "phoul (@phoul)"
|
||
|
|
description = "Look for SHA384/SHA512 constants"
|
||
|
|
date = "2014-01"
|
||
|
|
version = "0.1"
|
||
|
|
strings:
|
||
|
|
$c0 = { 428a2f98 }
|
||
|
|
$c1 = { 982F8A42 }
|
||
|
|
$c2 = { 71374491 }
|
||
|
|
$c3 = { 91443771 }
|
||
|
|
$c4 = { B5C0FBCF }
|
||
|
|
$c5 = { CFFBC0B5 }
|
||
|
|
$c6 = { E9B5DBA5 }
|
||
|
|
$c7 = { A5DBB5E9 }
|
||
|
|
$c8 = { D728AE22 }
|
||
|
|
$c9 = { 22AE28D7 }
|
||
|
|
condition:
|
||
|
|
5 of them
|
||
|
|
}
|