Detect-It-Easy/db/PE/protector_PEnguinCrypt.2.sg

// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

meta("protector", "PEnguinCrypt");

function detect() {
    if (PE.compareEP("B8........55506764FF360000676489260000BD4B484342B804000000CC")) {
        sVersion = "1.0";
        bDetected = true;
    }

    return result();
}