mirrors/Detect-It-Easy
2
0
Fork 0
mirror of https://github.com/horsicq/Detect-It-Easy.git synced 2026-06-24 01:54:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

Fix: 2023-10-04

Browse source
This commit is contained in:
horsicq 2023-10-04 19:53:47 +02:00
commit 22ea8f9c9d
3 changed files with 13 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

1
README.md
View file

@ -22,7 +22,6 @@ You can help with translation: https://github.com/horsicq/XTranslation
![alt text](https://github.com/horsicq/Detect-It-Easy/blob/master/docs/3.png "3")
![alt text](https://github.com/horsicq/Detect-It-Easy/blob/master/docs/4.png "4")
![alt text](https://github.com/horsicq/Detect-It-Easy/blob/master/docs/5.png "5")
![alt text](https://github.com/horsicq/Detect-It-Easy/blob/master/docs/6.png "6")
Detect It Easy, or abbreviated "DIE" is a program for determining types of files.

14
db/PE/Confuser.2.sg
View file

@ -1,4 +1,5 @@
// DIE's signature file
// Author: Levis <levintaeyeon@live.com> http://ltops9.wordpress.com/
init("protector","Confuser");
@ -35,7 +36,18 @@ function detect(bShowType,bShowVersion,bShowOptions)
}
bDetected=1;
}
} else if(PE.isNET()){
if(PE.section.length>=2)
{
var nVersionOffset=PE.findString(PE.section[1].FileOffset,PE.section[1].FileSize,"ConfuserEx v");
if(nVersionOffset!=-1)
{
sVersion=PE.getString(nVersionOffset+12,7);
sName = "ConfuserEx";
bDetected=1;
}
}
}
return result(bShowType,bShowVersion,bShowOptions);
}

23
db/PE/ConfuserEx.2.sg
View file

@ -1,23 +0,0 @@
// DiE's Signature File
// ConfuserEx Detection
// Author: Levis <levintaeyeon@live.com> http://ltops9.wordpress.com/
init("protector","ConfuserEx");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(PE.isNET())
{
if(PE.section.length>=2)
{
var nVersionOffset=PE.findString(PE.section[1].FileOffset,PE.section[1].FileSize,"ConfuserEx v");
if(nVersionOffset!=-1)
{
sVersion=PE.getString(nVersionOffset+12,7);
bDetected=1;
}
}
}
return result(bShowType,bShowVersion,bShowOptions);
}