Detect-It-Easy/db/PE/DeepSea.2.sg
2014-06-23 14:46:02 +02:00

24 lines
596 B
Text

// DIE's signature file
init("protector","DeepSea");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(PE.isNET())
{
var nOffset=PE.findString(PE.section[0].FileOffset,
PE.section[0].FileSize,
"DeepSeaObfuscator");
if(nOffset!=-1)
{
if(PE.compare("'Evaluation'",nOffset+18))
{
sVersion="4.X";
sOptions="Evaluation";
}
bDetected=1;
}
}
return result(bShowType,bShowVersion,bShowOptions);
}