mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
19 lines
No EOL
621 B
JavaScript
Executable file
19 lines
No EOL
621 B
JavaScript
Executable file
// Detect It Easy: detection rule file
|
|
// Author: horsicq <horsicq@gmail.com>
|
|
|
|
meta("protector", "CodeWall");
|
|
|
|
function detect() {
|
|
if (PE.isNet()) {
|
|
if (PE.isNetObjectPresent("CodeWallTrialVersion") || PE.isNetObjectPresent("CodeWallTrialVersion\u0001")) {
|
|
sVersion = "4.X";
|
|
sOptions = "demo";
|
|
bDetected = true;
|
|
} else if (PE.isSignatureInSectionPresent(0, "9161d281........11..175813..11..11..32..28........11..6f........13..7e........2d..73")) {
|
|
sVersion = "4.X";
|
|
bDetected = true;
|
|
}
|
|
}
|
|
|
|
return result();
|
|
} |