Detect-It-Easy/db/PE/AssemblyInvoke.2.sg
2014-06-01 23:42:39 +02:00

16 lines
335 B
Text

// DIE's signature file
init("protector","AssemblyInvoke");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(PE.isNET())
{
if(PE.isSignatureInSectionPresent(0,"282d00000a6f2e00000a14146f2f00000a"))
{
bDetected=1;
}
}
return result(bShowType,bShowVersion,bShowOptions);
}