mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
33711a0407
Added a standard header comment to all db framework and detection rule files, indicating they are part of the Detect It Easy (DiE-JS) framework and warning against unauthorized changes. This improves consistency and clarifies file purpose for maintainers.
15 lines
No EOL
728 B
Text
Executable file
15 lines
No EOL
728 B
Text
Executable file
// Detect It Easy: DiE-JS framework file
|
|
// Don't change anything unless you're sure about what you're doing
|
|
|
|
// RosASM's PE DOS stub is tested twice - once to detect RosASM as a compiler and again
|
|
// to prevent being detected as a linker (RosASM has no linker). Detect it once here.
|
|
|
|
var bRosASM;
|
|
if (typeof bRosASM === "undefined") {
|
|
bRosASM = false;
|
|
if (PE.compare("'RosAsm Assembler'", 0xb0)) {
|
|
bRosASM = true;
|
|
} else if (PE.compare("'MZ'90000300000004000000ffff0000b8000000000000004000000000000000000000000000000000000000000000000000000000000000........800000000e1fba0e00b409cd21b8014ccd21'This program cannot be run in DOS mode\r\n$'000000000000000000")) {
|
|
bRosASM = true;
|
|
}
|
|
} |