backoff yara sigs; credit Jack Crook @jackcr