mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
23 lines
No EOL
800 B
JavaScript
Executable file
23 lines
No EOL
800 B
JavaScript
Executable file
// Detect It Easy: detection rule file
|
|
// Author: horsicq <horsicq@gmail.com>
|
|
|
|
// https://huaidan.org/archives/983.html
|
|
meta("protector", "FishPE Shield");
|
|
|
|
function detect() {
|
|
if (PE.compareEP("558BEC83C4D05356578B451083C00C8B008945DC")) {
|
|
sVersion = "1.12/1.16";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("60E8EAFDFFFFFFD0C38D4000..0000002C000000")) {
|
|
sVersion = "1.12/1.16";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("60E8........C390090000002C000000........C4030000BCA0000000400100")) {
|
|
sVersion = "1.0X";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("60e8........61c3") && PE.compareEP("60e8$$$$$$$$558bec81c470ffffff535657")) {
|
|
sVersion = "2.0.1";
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |