Detect-It-Easy/db/PE/AHpack.2.sg
2014-06-02 00:02:17 +02:00

17 lines
390 B
Text

// DIE's signature file
init("packer","AHpack");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(PE.compareEP("6068........B8........FF1068........50B8........FF1068........6A40FFD08905"))
{
if(PE.section[0].Name!="!EPack")
{
sVersion="0.1";
bDetected=1;
}
}
return result(bShowType,bShowVersion,bShowOptions);
}