// Detect It Easy: detection rule file init("packer", ".NETZ"); function detect() { if (PE.isNET() && PE.isSignatureInSectionPresent(0, "00'NetzStarter'00'netz'00")) { bDetected = true; } return result(); }