1.下载插件,并放到E:\IDA 7.0\plugins目录下
插件链接: https://github.com/polymorf/findcrypt-yara.
2.安装Microsoft Visual C++ Compiler for Python 2.7支持库
下载链接: https://www.microsoft.com/en-us/download/details.aspx?id=44266.
点击下载后,安装就完事了
3.安装yara-python
pip2 install yara-python
如果pip2命令安装yara-python失败,就采用源码安装
源码下载链接: https://pypi.org/project/yara-python/3.10.0/#files.
亲测3.10.0可用(红框)
点击下载,解压到文件夹,cmd切到文件夹目录,执行python2 ./setup.py install