// Detect It Easy: detection rule file init("protector", "ReNET-pack"); function detect() { if (PE.isNET() && PE.isSignatureInSectionPresent(0, "'Protected/Packed with ReNET-Pack by stx'")) { bDetected = true; } return result(); }