Detect-It-Easy/db/PE/protector_PE_Encrypt.2.sg

// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("protector", "PE Encrypt");

function detect() {
    if (PE.compareEP("558BEC83C4D05356578D75FC8B442430250000FFFF8138'MZ'900074072D00100000EBF18945FC")) {
        sVersion = "1.0";
        bDetected = true;
    }

    return result();
}