Detect-It-Easy/db/PE/protector_Cryptect.2.sg

// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("protector", "Cryptect");

function detect() {
    if (PE.compareEP("68........e8$$$$$$$$5052e9$$$$$$$$53660fcb560fb7df9c0fbff381d6........d2e7558bda57")) {
        bDetected = true;
    } else if (PE.compareEP("68........e8$$$$$$$$525166990fca999cf550c0de..d2d40fb7c3550fabe5f8565766")) {
        bDetected = true;
    }

    return result();
}