Skip to content

Commit

Permalink
docs: add sym_hash() example to mach-o module docs
Browse files Browse the repository at this point in the history
  • Loading branch information
latonis committed Nov 22, 2024
1 parent 815bdac commit cba2f69
Showing 1 changed file with 21 additions and 0 deletions.
21 changes: 21 additions & 0 deletions site/content/docs/modules/macho.md
Original file line number Diff line number Diff line change
Expand Up @@ -267,6 +267,27 @@ rule import_hash_example {
}
```

### sym_hash()

Returns an MD5 hash of the symbol table entries designated in the Mach-O binary.

{{< callout title="Notice">}}

The returned hash string is always in lowercase.

{{< /callout >}}

#### Example

```yara
import "macho"
rule sym_hash_example {
condition:
macho.sym_hash() == "a9ccc7c7b8bd33a99dc7ede4e8d771b4"
}
```

------

### Module structure
Expand Down

0 comments on commit cba2f69

Please sign in to comment.