mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
33711a0407
Added a standard header comment to all db framework and detection rule files, indicating they are part of the Detect It Easy (DiE-JS) framework and warning against unauthorized changes. This improves consistency and clarifies file purpose for maintainers.
17 lines
No EOL
514 B
Text
Executable file
17 lines
No EOL
514 B
Text
Executable file
// Detect It Easy: DiE-JS framework file
|
|
// Don't change anything unless you're sure about what you're doing
|
|
|
|
// MFC is tested twice - as a library and as a compiler (to distinguish C from
|
|
// C++). Detect it once here.
|
|
|
|
var aMFC;
|
|
|
|
if (!aMFC && PE) {
|
|
aMFC = PE.isLibraryPresentExp(/^MFC(\d+?)(u?)(d?)\.dll/i);
|
|
if (!aMFC) {
|
|
if (PE.section[".data"] &&
|
|
PE.isSignatureInSectionPresent(PE.section[".data"].Number, "'CMFCComObject'")) {
|
|
aMFC = 1;
|
|
}
|
|
}
|
|
} |