# ARAY

LD_PRELOAD=./libyara.so ./yara rule reverse.yac -s

**rule**

rule free
{
  strings:
      $str = /AIS3\{[^\}]{1,}\}/
  condition:
      $str
}

rule easy
{
  strings:
      $str = /AIS3\x00\$x1\x00\{[^\}]{1,}\}/
  condition:
      $str
}