Detect-It-Easy/db/PE/packer_NETZ.2.sg

// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("packer", ".NETZ");

function detect() {
    if (PE.isNetObjectPresent("NetzStarter") && PE.isSignatureInSectionPresent(0, "00'NetzStarter'00'netz'00")) {
        bDetected = true;
    }

    return result();
}