mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
new
This commit is contained in:
parent
6d2eecc036
commit
e70d065355
14 changed files with 162 additions and 17 deletions
|
|
@ -11,6 +11,12 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
sOptions="by D'B";
|
||||
bDetected=1;
|
||||
}
|
||||
if(Binary.compare("e9$$$$bf....be....a5a48cda83c2..50b4..bb....cd2158"))
|
||||
{
|
||||
sVersion="1.0c";
|
||||
sOptions="1994 by D'B";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(Binary.compare("e9$$$$e800005b508cc005....8b0e....03c889....8b0e"))
|
||||
{
|
||||
sVersion="1.0";
|
||||
|
|
|
|||
15
db/Binary/com.J0B cryptor.2.sg
Normal file
15
db/Binary/com.J0B cryptor.2.sg
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
// DIE's signature file
|
||||
// Author: hypn0 <hypn0@mail.ru>
|
||||
|
||||
init("protector","J0B cryptor");
|
||||
|
||||
function detect(bShowType,bShowVersion,bShowOptions)
|
||||
{
|
||||
if(Binary.compare("e9$$$$fa be....8d0e....2bcee8$$$$5051ba....8bda301cac32c35183c4..b9"))
|
||||
{
|
||||
sOptions="1996";
|
||||
bDetected=1;
|
||||
}
|
||||
|
||||
return result(bShowType,bShowVersion,bShowOptions);
|
||||
}
|
||||
|
|
@ -82,6 +82,12 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
sOptions="mutated COM like RSCC";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(Binary.compare("fc50be....bf....57b9....f3a4c3"))
|
||||
{
|
||||
sVersion="1.0x";
|
||||
sOptions="mutated COM like RSCC";
|
||||
bDetected=1;
|
||||
}
|
||||
|
||||
return result(bShowType,bShowVersion,bShowOptions);
|
||||
}
|
||||
|
|
|
|||
|
|
@ -5,16 +5,16 @@ init("packer","SCRNCH");
|
|||
|
||||
function detect(bShowType,bShowVersion,bShowOptions)
|
||||
{
|
||||
if(Binary.compare("eb$$bb....b44acd2181eb....73..ba....b9....e9$$$$0e1fb440bb....cd21b8....cd21"))
|
||||
if(Binary.compare("eb$$bb....b44acd2181eb....73..ba....b9....e9"))
|
||||
{
|
||||
sVersion="1.02";
|
||||
sOptions="by Graeme W. McRae";
|
||||
sOptions="1988 by Graeme W. McRae";
|
||||
bDetected=1;
|
||||
}
|
||||
if(Binary.compare("bb....b44acd2181eb....73..ba....b9....e9$$$$0e1fb440bb....cd21b8....cd21"))
|
||||
{
|
||||
sVersion="1.00";
|
||||
sOptions="1988";
|
||||
sOptions="1988 by Graeme W. McRae";
|
||||
bDetected=1;
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -43,6 +43,26 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
sVersion="1.5";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("e8$$$$e4212e0c..e6212eb9....5151fd89c93eb5..fcb8....fbcd162e5987c926b8....fd"))
|
||||
{
|
||||
sVersion="1.5";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("e8$$$$26e421f80c..e621f98d1e....53365389d93e30edb8....cd165b"))
|
||||
{
|
||||
sVersion="1.5";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("91221db4..cd21d2d1e9$$$$b4..cd21a6e8"))
|
||||
{
|
||||
sVersion="1.5";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("b4..cd21b4..cd21e8$$$$ba....ec900c..26ee8d0e....51fd51"))
|
||||
{
|
||||
sVersion="1.5";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("95e8$$$$fbba....3eecfc0c..3eeefb8d0e....51512687c9b8....28ed26cd162e59fdfb87c9b8....fd88e9f8b5..cd1626592ec3"))
|
||||
{
|
||||
sVersion="1.5";
|
||||
|
|
|
|||
|
|
@ -15,6 +15,11 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
sVersion="2.02T";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("fc0e1fb4..bb....b9....ba....cd21061e07bf....b9....30c0f3aa07e9"))
|
||||
{
|
||||
sVersion="2.02T";
|
||||
bDetected=1;
|
||||
}
|
||||
|
||||
return result(bShowType,bShowVersion,bShowOptions);
|
||||
}
|
||||
|
|
|
|||
|
|
@ -24,6 +24,11 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
sVersion="1.11c";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("B430CD2186E03D....73..B0..B4..CD2150B8....58EB$$EB$$b8....CD2150B2..B8....CD21"))
|
||||
{
|
||||
sVersion="1.00";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("521eb430cd2186e03d....73..cd200e1fb4..e8"))
|
||||
{
|
||||
sVersion="1.11f-1.12s";
|
||||
|
|
|
|||
|
|
@ -20,6 +20,12 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
sVersion="0.91c";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("50060e1f8b0e....8bf14e8cdb89f703......8ec3fdf3a4b8....5350cb"))
|
||||
{
|
||||
sVersion="0.91";
|
||||
sOptions="1990";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("0e1f068b0e....8bf14e89f78cdb031e....8ec3fdf3a453b8....50cb"))
|
||||
{
|
||||
sVersion="1.0";
|
||||
|
|
|
|||
|
|
@ -8,13 +8,31 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
if(MSDOS.compareEP("b8....fcfdb9....be....f82e180cf5fcfc74..fccc"))
|
||||
{
|
||||
sVersion="3.05 PRO";
|
||||
sOptions="1994/97 by Blagoje Ceklic //COMSEC";
|
||||
sOptions="1994/97 by Ceklic Blagoje //COMSEC";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("2bdb81cb....f8fdbf....2bd281ca....f52e291dfcf7d3fdfccc"))
|
||||
{
|
||||
sVersion="3.05";
|
||||
sOptions="1994/97 by Blagoje Ceklic //COMSEC";
|
||||
sOptions="1994/97 by Ceklic Blagoje //COMSEC";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("bb....f5b9....fcfdbe....fdfc2e190cfcfdf8f7d9d1d9f8f8"))
|
||||
{
|
||||
sVersion="3.xx";
|
||||
sOptions="by Ceklic Blagoje //COMSEC";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("be....fcb9....fdf5f5ba....fc2e102cf8d1d1d1c9f7d9"))
|
||||
{
|
||||
sVersion="3.xx";
|
||||
sOptions="by Ceklic Blagoje //COMSEC";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("33db81c3....f8fdbe....f8f5fcba....f52e111cfcfd72"))
|
||||
{
|
||||
sVersion="3.xx";
|
||||
sOptions="by Ceklic Blagoje //COMSEC";
|
||||
bDetected=1;
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -10,16 +10,47 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
sVersion="2.11";
|
||||
bDetected=1;
|
||||
}
|
||||
if(MSDOS.compareEP("e8$$$$e8$$$$e9$$$$bf....e9$$$$29d2e9$$$$8edaeb$$eb$$e9$$$$e8$$$$8715e8$$$$e8$$$$e8$$$$52e8$$$$31ede9$$$$be....eb$$872ceb$$55e8$$$$eb$$be....bb....2e8a3789d880c6..2d....80f6..35....80ee..00c6"))
|
||||
else if(MSDOS.compareEP("e8$$$$e8$$$$e9$$$$bf....e9$$$$29d2e9$$$$8edaeb$$eb$$e9$$$$e8$$$$8715e8$$$$e8$$$$e8$$$$52e8$$$$31ede9$$$$be....eb$$872ceb$$55e8$$$$eb$$be....bb....2e8a3789d880c6..2d....80f6..35....80ee..00c6"))
|
||||
{
|
||||
sVersion="3.10/11";
|
||||
bDetected=1;
|
||||
}
|
||||
if(MSDOS.compareEP("e9$$$$bb....e8$$$$e9$$$$e9$$$$e8$$$$e9$$$$31c0e9$$$$8ed8e8$$$$e9$$$$8707e8$$$$e8$$$$50e8$$$$31dbe8$$$$e8$$$$e8$$$$be....eb$$871ce8$$$$53e8$$$$b9....bf....2e8a0589fb04..81eb....34..81f3....81c3....28d800f8"))
|
||||
else if(MSDOS.compareEP("e8$$$$eb$$bf....e8$$$$eb$$31c0e9$$$$8ed8e8$$$$e8$$$$8705e8$$$$50eb$$31c9e8$$$$e9$$$$e8$$$$e8$$$$bb"))
|
||||
{
|
||||
sVersion="3.10/11";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("e8$$$$be....e8$$$$eb$$eb$$e9$$$$eb$$eb$$29d2eb$$e9$$$$8eda"))
|
||||
{
|
||||
sVersion="3.10/11";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("e8$$$$bf....e9$$$$31dbeb$$e8$$$$e8$$$$8edbeb$$e9$$$$871de8$$$$e9$$$$53"))
|
||||
{
|
||||
sVersion="3.10/11";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("e9$$$$bb....e8$$$$e9$$$$e9$$$$e8$$$$e9$$$$31c0e9$$$$8ed8e8$$$$e9$$$$8707e8$$$$e8$$$$50e8$$$$31dbe8$$$$e8$$$$e8$$$$be....eb$$871ce8$$$$53e8$$$$b9....bf....2e8a0589fb04..81eb....34..81f3....81c3....28d800f8"))
|
||||
{
|
||||
sVersion="3.10/11";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("e9$$$$be....e8$$$$29c9eb$$e9$$$$eb$$e8$$$$8ed9e9$$$$870ce8$$$$51e8$$$$31d2"))
|
||||
{
|
||||
sVersion="3.10/11";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("e9$$$$bf....e9$$$$31f6e9$$$$8edee9$$$$e9$$$$8735eb$$eb$$56e8$$$$29d2e8$$$$be....e9$$$$e8$$$$8714"))
|
||||
{
|
||||
sVersion="3.10/11";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("9c505351525657551e06fcb8....cd2184c075..cd20a8..04..eb$$eb$$ba....ec0c..eb"))
|
||||
{
|
||||
sVersion="3.0";
|
||||
sOptions="by T.Torfs";
|
||||
bDetected=1;
|
||||
}
|
||||
|
||||
return result(bShowType,bShowVersion,bShowOptions);
|
||||
}
|
||||
|
|
|
|||
|
|
@ -16,6 +16,11 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
sOptions="modified";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("83ec..83e4..8bec50be....0336....8cd28cd803....33c275..fc8ec233ff"))
|
||||
{
|
||||
sVersion="3.x";
|
||||
bDetected=1;
|
||||
}
|
||||
|
||||
return result(bShowType,bShowVersion,bShowOptions);
|
||||
}
|
||||
|
|
|
|||
|
|
@ -7,58 +7,64 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
{
|
||||
if(MSDOS.compareEP("e800005b83c3..908bd3e8$$$$5b2e803f..74..90908bdab9....eb"))
|
||||
{
|
||||
sVersion="1.21 EXE";
|
||||
sVersion="1.21";
|
||||
sOptions="by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("8cd0bb....8ed333c98ed0b9....eb$$e2..33d2"))
|
||||
{
|
||||
sVersion="1.18 EXE";
|
||||
sVersion="1.18";
|
||||
sOptions="by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("8cd0bb....8ed333d28ed0b9....eb$$e2..33d2"))
|
||||
{
|
||||
sVersion="1.x EXE";
|
||||
sVersion="1.x";
|
||||
sOptions="by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("b9....eb$$e2$$eb..90cd20e2"))
|
||||
{
|
||||
sVersion="1.15 EXE";
|
||||
sVersion="1.15";
|
||||
sOptions="by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("e800005b83c3..908bd3e8$$$$5b2e803f..74..90908bdab9....2ec0"))
|
||||
{
|
||||
sVersion="1.20 EXE";
|
||||
sVersion="1.20";
|
||||
sOptions="1998 by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("05....eb$$bb....81ebfa..85f9eb$$eb$$39fbeb"))
|
||||
{
|
||||
sVersion="1.22 EXE";
|
||||
sVersion="1.22";
|
||||
sOptions="by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("81ea....eb$$b9....81c1....39d0bb....85c3b9....f505....bb....ba....81c2"))
|
||||
{
|
||||
sVersion="1.23 EXE";
|
||||
sVersion="1.23";
|
||||
sOptions="by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("eb$$39c281c3....eb$$81c3....39cc81ea....39e2b9....85da39e9eb"))
|
||||
{
|
||||
sVersion="1.24 EXE";
|
||||
sVersion="1.24";
|
||||
sOptions="by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("8cd1ba....8ed233d28ed18bcaeb"))
|
||||
{
|
||||
sVersion="1.13 EXE";
|
||||
sVersion="1.13";
|
||||
sOptions="by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("e8$$$$5d81ed....458cd68bfc0f23c70f23ceb0..e6..fa0e17"))
|
||||
{
|
||||
sVersion="1.26b1";
|
||||
sOptions="2000 by Christoph Gabler";
|
||||
bDetected=1;
|
||||
}
|
||||
|
||||
return result(bShowType,bShowVersion,bShowOptions);
|
||||
}
|
||||
|
|
|
|||
|
|
@ -33,6 +33,24 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
sOptions="by Boogie";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("8cc981c1....51b9....51b1..068cd30651b1..b8....8cca03d0fc"))
|
||||
{
|
||||
sVersion="3.04a";
|
||||
sOptions="by Boogie";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("8cc981c1....51b9....510606fc8cd5b1..51b1..8cd383eb..5351"))
|
||||
{
|
||||
sVersion="3.04a";
|
||||
sOptions="by Boogie";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("8cc981c1....51b9....fc8cd5510606b1..51b1..8cd383eb..5351"))
|
||||
{
|
||||
sVersion="3.04a";
|
||||
sOptions="by Boogie";
|
||||
bDetected=1;
|
||||
}
|
||||
else if(MSDOS.compareEP("f9be....81ee....2e80b4......eb"))
|
||||
{
|
||||
sVersion="1.1c";
|
||||
|
|
|
|||
|
|
@ -31,6 +31,10 @@ function detect(bShowType,bShowVersion,bShowOptions)
|
|||
bDetected=1;
|
||||
sName="ZOO archive";
|
||||
}
|
||||
|
||||
else if(MSDOS.compareOverlay("4c0103"))
|
||||
{
|
||||
bDetected=1;
|
||||
sName="COFF executable";
|
||||
}
|
||||
return result(bShowType,bShowVersion,bShowOptions);
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue