Skip to content

Instantly share code, notes, and snippets.

@shellcromancer
Last active January 12, 2022 13:44
Show Gist options
  • Select an option

  • Save shellcromancer/f7260f3b05787e37f811baa9c37e9c65 to your computer and use it in GitHub Desktop.

Select an option

Save shellcromancer/f7260f3b05787e37f811baa9c37e9c65 to your computer and use it in GitHub Desktop.
Identify code/constants for the MD5 hashing algorithm
rule alg_crypto_md5 {
meta:
description = "Identify code/constants for the MD5 hashing algorithm."
author = "@shellcromancer <root@shellcromancer.io>"
version = "0.1"
date = "2022-01-11"
reference = "https://en.wikipedia.org/wiki/MD5"
strings:
$cA = { 67452301 }
$cB = { efcdab89 }
$cC = { 98badcfe }
$cD = { 10325476 }
// K[i] := floor(232 × abs (sin(i + 1)))
$k0 = { d76aa478 }
$k1 = { e8c7b756 }
$k2 = { 242070db }
$k3 = { c1bdceee }
$k4 = { f57c0faf }
$k5 = { 4787c62a }
$k6 = { a8304613 }
$k7 = { fd469501 }
$k63 = { fd469501 }
condition:
all of ($c*) or 4 of ($k*)
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment