In diary entry YARA’s BASE64 Strings, I explain the new BASE64 feature in YARA (we’re at version 4.0.2 now).
Here is a video showing this new feature:
Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com DidierStevensLabs.com
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.