Detect-It-Easy/db/PE/NTShell.2.sg
2014-07-13 23:48:49 +06:00

15 lines
419 B
Text

// DIE's signature file
// Author: hypn0 <hypn0@mail.ru>
init("packer","NTSHELL");
function detect(bShowType,bShowVersion,bShowOptions)
{
if(PE.compareEP("55e8........5d81ed........eb$$eb$$8d85........8dbd........eb$$8db5........eb$$8bcfeb$$2bc84ffdeb$$33dbeb$$8a07eb$$d2c8eb$$2a....eb$$E8"))
{
sVersion="5.0";
bDetected=1;
}
return result(bShowType,bShowVersion,bShowOptions);
}