Since the yara-rules version contain already all the rules + additional one.
It may be better for the user to only keep the updated in yara-rules and kill the other ?

Thought this was interesting: https://thisissecurity.net/2014/10/15/warbird-operation/

This is for license checks in certain windows exes/dlls:

/* Match the PEB.Ldr assembly for warbird function resolution */
rule WarBird
{
strings:
    $a = {64 A1 30 00 00 00 2B CA D1 F9 8B 40 0C 83 C0 0C}
condition:
    $a
}

It could be good to update Yara-Rules repository.

https://github.com/Yara-Rules/rules

Don't know if you want to add these as a git submodule or something. They have a ton of signatures for malware.