mirrors/Detect-It-Easy
2
0
Fork 0
mirror of https://github.com/horsicq/Detect-It-Easy.git synced 2026-06-24 01:54:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

Add new file(s): 2023-12-23

Browse source
This commit is contained in:
horsicq 2023-12-23 06:33:40 +01:00
commit bbdd3bab34
5 changed files with 1750 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

33
db/ELF/DMD.4.sg Executable file
View file

@ -0,0 +1,33 @@
// DIE's signature file
init("compiler","DMD");
function getDMDVersion()
{
var sResult="";
var nSection=ELF.getSectionNumber(".comment");
if(nSection!=-1)
{
var nSectionOffset=ELF.getSectionFileOffset(nSection);
var nSectionSize=ELF.getSectionFileSize(nSection);
var nOffset=ELF.findString(nSectionOffset,nSectionSize,"DMD v");
if(nOffset!=-1)
{
sResult = ELF.getString(nOffset+5,20);
}
}
return sResult;
}
function detect(bShowType,bShowVersion,bShowOptions)
{
var sDMDVersion=getDMDVersion();
if(sDMDVersion!="")
{
bDetected=1;
sVersion=sDMDVersion;
}
return result(bShowType,bShowVersion,bShowOptions);
}

13
db/PE/DMD.4.sg Executable file
View file

@ -0,0 +1,13 @@
// DIE's signature file
init("compiler","DMD");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(PE.isSectionNamePresent(".minfo") && PE.isSectionNamePresent("._deh"))
{
bDetected=1;
}
return result(bShowType,bShowVersion,bShowOptions);
}

20
db/PE/_FixDetects.9.sg Executable file
View file

@ -0,0 +1,20 @@
function detect(bShowType,bShowVersion,bShowOptions)
{
if (_isResultPresent("packer", "AHpacker") && _isResultPresent("packer", "ExE Pack")) {
_removeResult("packer", "AHpacker");
}
if (_isResultPresent("linker", "Microsoft linker") && _isResultPresent("linker", "Turbo linker")) {
_removeResult("linker", "Turbo linker");
}
if (_isResultPresent("tool", "Microsoft Visual Studio") && _isResultPresent("tool", "Borland Delphi")) {
_removeResult("tool", "Borland Delphi");
}
if (_isResultPresent("packer", "Simple Pack") && _isResultPresent("compiler", "FASM")) {
_removeResult("compiler", "FASM");
}
return "";
}

1671
db/PE/__GenericHeuristicAnalysis_By_DosX.7.sg Executable file
View file

File diff suppressed because it is too large Load diff

13
db/PE/ldc.4.sg Executable file
View file

@ -0,0 +1,13 @@
// DIE's signature file
init("compiler","ldc");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(PE.isSectionNamePresent(".minfo") && (!(PE.isSectionNamePresent("._deh"))))
{
bDetected=1;
}
return result(bShowType,bShowVersion,bShowOptions);
}