As you can see my file doesn't has syntax issues. The rules are using a condition which it's not supported by the compiled version on Ubuntu.
Check this URL https://yara.readthedocs.io/en/v3.5.0/writingrules.html and look for the "Accessing data at a given position" section. There appears uint32be it's a reserved function name. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1883857 Title: Not supported "uint32be" condition in yara rules To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/clamav/+bug/1883857/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
