Detect-It-Easy/db/PE/protector_SDProtector.2.sg
2026-05-25 21:03:46 +03:00

20 lines
No EOL
484 B
JavaScript
Executable file

// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>
meta("protector", "SDProtector");
function detect() {
if (PE.compareEP("558BEC6AFF68........688888880864A1")) {
if (PE.compareEP("5083EC08", 42)) {
sVersion = "1.10";
} else if (PE.compareEP("1833C0", 77)) {
sVersion = "1.16";
} else {
sVersion = "1.1X";
}
bDetected = true;
}
return result();
}