mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
22 lines
No EOL
615 B
JavaScript
Executable file
22 lines
No EOL
615 B
JavaScript
Executable file
// Detect It Easy: detection rule file
|
|
// Author: horsicq <horsicq@gmail.com>
|
|
|
|
meta("protector", "VCasm-Protector");
|
|
|
|
function detect() {
|
|
if (PE.compareEP("558BEC6AFF68........68........64A1000000005064892500000000E803000000")) {
|
|
sVersion = "1.0X";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("EB..'[VProtect]'")) {
|
|
if (PE.compareEP("..0A")) {
|
|
sVersion = "1.0e";
|
|
} else if (PE.compareEP("..0B")) {
|
|
sVersion = "1.1-1.2";
|
|
} else {
|
|
sVersion = "1.X";
|
|
}
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |