mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
25 lines
No EOL
890 B
JavaScript
Executable file
25 lines
No EOL
890 B
JavaScript
Executable file
// Detect It Easy: detection rule file
|
|
// Author: horsicq <horsicq@gmail.com>
|
|
|
|
// https://www.crypkey.com/
|
|
meta("protector", "CrypKey");
|
|
|
|
function detect() {
|
|
if (PE.compareEP("8B1D........83FB00750AE83C000000E8..0A00008B44240850E8..020000A1")) {
|
|
bDetected = true;
|
|
} else if (PE.compareEP("E8........5883E805505F578BF781EF........83C639BA........8BDFB90B......8B06")) {
|
|
sVersion = "5.X-6.X";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("E8........E8........83F80075076A00E8")) {
|
|
sVersion = "5.6.X";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("833D........00753468........E8")) {
|
|
sVersion = "6.1X";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("8b4424..50e8$$$$$$$$558bec81c4........5081c4........53c745")) {
|
|
sOptions = "Core module";
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |