Update an expected yara file to account for additional functions foun…

…d during the test suite and change dates in yara rules
mandiant · Aug 24, 2023 · b5c583c · b5c583c
1 parent 65d3a99
commit b5c583c
Show file tree

Hide file tree

Showing 6 changed files with 763 additions and 74 deletions.
diff --git a/yara/expected_1c444ebe_692f7fd6.yar b/yara/expected_1c444ebe_692f7fd6.yar
@@ -2,8 +2,8 @@ rule super_rule_1c444
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "1c444ebeba24dcba8628b7dfe5fec7c6"
     strings:
@@ -1411,8 +1411,8 @@ rule super_rule_692f7
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "692f7fd6d198e804d6af98eb9e390d61"
     strings:

diff --git a/yara/expected_1c444ebeba24dcba8628b7dfe5fec7c6.exe_.yar b/yara/expected_1c444ebeba24dcba8628b7dfe5fec7c6.exe_.yar
@@ -2,8 +2,8 @@ rule super_rule_1c444
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "1c444ebeba24dcba8628b7dfe5fec7c6"
     strings:

diff --git a/yara/expected_9324d1a8ae37a36ae560c37448c9705a.exe_.yar b/yara/expected_9324d1a8ae37a36ae560c37448c9705a.exe_.yar
diff --git a/yara/expected_c2bb17c12975e.yar b/yara/expected_c2bb17c12975e.yar
@@ -2,8 +2,8 @@ rule super_rule_50580
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "50580ef0b882905316c4569162ea07d9"
     strings:

diff --git a/yara/expected_pma_01-01.exe_01-02.exe b/yara/expected_pma_01-01.exe_01-02.exe
@@ -2,8 +2,8 @@ rule super_rule_bb742
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "bb7425b82141a1c0f7d60e5106676bb1"
     strings:

diff --git a/yara/expected_pma_03-04.exe_11-03.exe_16-01.exe b/yara/expected_pma_03-04.exe_11-03.exe_16-01.exe
@@ -2,8 +2,8 @@ rule super_rule_18ec5
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "18ec5becfa3991fb654e105bafbd5a4b"
     strings:
@@ -280,8 +280,8 @@ rule super_rule_7faaf
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "7faafc7e4a5c736ebfee6abbbc812d80"
     strings:
@@ -4651,8 +4651,8 @@ rule super_rule_b94af
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "b94af4a4d4af6eac81fc135abda1c40c"
     strings:
@@ -6436,8 +6436,8 @@ rule super_rule_7faaf_b94af
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "7faafc7e4a5c736ebfee6abbbc812d80"
         md5 = "b94af4a4d4af6eac81fc135abda1c40c"
@@ -6465,8 +6465,8 @@ rule super_rule_18ec5_7faaf_b94af
 {
     meta:
         author = "CAPA Matches"
-        date_created = "2023-08-10"
-        date_modified = "2023-08-10"
+        date_created = "EXPECTED_DATE"
+        date_modified = "EXPECTED_DATE"
         description = ""
         md5 = "18ec5becfa3991fb654e105bafbd5a4b"
         md5 = "7faafc7e4a5c736ebfee6abbbc812d80"