# YaraVM

> YaraVM is an IDA Pro loader and processor module for compiled YARA rules. It loads the rule bytecode and the regex bytecode so they can be disassembled in IDA.

- Type: Tool
- Targets: Binary
- Category: Native analysis tools
- Relationship: Foundation tool
- Sources reviewed: 2026-11-07
- Added to the catalog: 2026-11-09
- Original resource: <https://github.com/milankovo/YaraVM>
- Primary source: <https://github.com/milankovo/YaraVM/blob/3b4e357faf65097b0f7b444cc0199398c81e5253/README.md>
- Catalog page: <https://awesomerea.org/resources/yaravm/>
- Record JSON: <https://awesomerea.org/resources/yaravm/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/yaravm/index.md)

## Requirements & limits

- Copy yara_loader.py into the IDA loaders directory, yara_proc.py into the procs directory, and libyara.til into the til directory.
- The README names no license.

## Primary sources

1. <https://github.com/milankovo/YaraVM/blob/3b4e357faf65097b0f7b444cc0199398c81e5253/README.md>

## More in Native binaries

- [DecompPipeline](https://awesomerea.org/resources/decomp-pipeline/index.md) · Tool
- [GameMaker 8.1 Decompiler](https://awesomerea.org/resources/gm81decompiler/index.md) · Tool
- [libdecomp](https://awesomerea.org/resources/libdecomp/index.md) · Tool
- [PSP Static Recompiler Toolkit](https://awesomerea.org/resources/psp-recompilation-toolkit/index.md) · Tool
- [PbdViewer](https://awesomerea.org/resources/pbdviewer/index.md) · Tool
- [Copy as YARA](https://awesomerea.org/resources/copy-as-yara/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.