mirrors/Detect-It-Easy
2
0
Fork 0
mirror of https://github.com/horsicq/Detect-It-Easy.git synced 2026-06-24 01:54:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add new file(s): 2023-10-16

Browse source
This commit is contained in:
horsicq 2023-10-16 18:10:22 +02:00
commit b39c20d81e
1 changed files with 29 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

29
db/PE/KoiVM.2.sg Normal file
View file

@ -0,0 +1,29 @@
// DIE's signature file
// Author: r0da https://github.com/whereisr0da
init("protector","KoiVM");
function detect(bShowType,bShowVersion,bShowOptions)
{
sVersion="2.0";
if(PE.isNET())
{
// VM Module
// .text = the first section
if(PE.isSignatureInSectionPresent(0,"'KoiVM.Runtime'"))
{
bDetected=1;
}
else if(PE.isSignatureInSectionPresent(0,"'VMEntryRun'"))
{
bDetected=1;
}
else if(PE.isSignatureInSectionPresent(0,"'KoiVM'"))
{
bDetected=1;
}
}
return result(bShowType,bShowVersion,bShowOptions);
}