Detect-It-Easy/db/PE/library_java.3.sg

// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("library", "Java");

function detect() {
    if (PE.getOverlaySize() > 0x40) {
        if (PE.findString(PE.getOverlayOffset(), 0x40, "META-INF/MANIFEST.MF") != -1) {
            var nResSection = PE.getResourceSection();
            if (nResSection != -1) {
                if (PE.isSignatureInSectionPresent(nResSection, "'Java Runtime Environment'")) {
                    bDetected = true;
                }
            }
        }
    }

    sLang = "Java";

    return result();
}