Uploaded December 2017 | Updated September 2026, 1 week ago

---

Open Analysis Live! In this tutorial we take a look at two different methods to identify strings, binary data, and Yara matches in IDA Pro. First we use binary search to identify Yara matches manually then we introduce YaraFind a new IDA Pro plugin that adds Yara search to IDA.

-----
OALABS DISCORD
discord.gg/6h5Bh5AMDU

OALABS PATREON
patreon.com/oalabs

OALABS TIP JAR
ko-fi.com/oalabs

OALABS GITHUB
github.com/OALabs

UNPACME - AUTOMATED MALWARE UNPACKING
unpac.me/#

-----

Unpacked Loki malware sample:
malshare.com/sample.php?action=detail&hash=037b874a119a7cd0e00a3c971dd3298a

IDA Plugin FindYara:
github.com/OALabs/FindYara

Yara documentation:
yara.readthedocs.io/en/v3.7.0

Tutorial what opcodes mean and how to reference them in IDA:
youtu.be/Zb8rkVjj-mQ

Feedback, questions, and suggestions are always welcome : )

Sergei twitter.com/herrcore
Sean twitter.com/seanmw

As always check out our tools, tutorials, and more content over at openanalysis.net