Detect-It-Easy/db/PE/FISH .NET.2.sg
2014-06-01 23:42:39 +02:00

22 lines
475 B
Text

// DIE's signature file
init("protector","FISH .NET");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(PE.isNET())
{
if(PE.isSignatureInSectionPresent(0,"0800'FISH_NET'"))
{
sVersion="1.X";
bDetected=1;
}
else if(PE.isSignatureInSectionPresent(0,"'FISH.NET'"))
{
sVersion="1.X";
bDetected=1;
}
}
return result(bShowType,bShowVersion,bShowOptions);
}