// Detect It Easy: detection rule file // Author: horsicq meta("protector", "ReNET-pack"); function detect() { if (PE.isNet() && PE.isSignatureInSectionPresent(0, "'Protected/Packed with ReNET-Pack by stx'")) { bDetected = true; } return result(); }