mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
4eebb1c386
Renamed numerous db_extra/PE and db/Binary rule files to use consistent prefixes (e.g., cryptor_, protector_, installer_, etc.) for improved organization and clarity. Minor metadata and whitespace adjustments were made in a few files to match naming conventions.
21 lines
No EOL
737 B
JavaScript
21 lines
No EOL
737 B
JavaScript
// Detect It Easy: detection rule file
|
|
|
|
meta("compiler", "EP:Microsoft C/C++");
|
|
|
|
function detect() {
|
|
if (PE.compareEP("64a100000000558bec6aff68........68........506489250000000083ec..5356578965")) {
|
|
sVersion = "3.0-5.0";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("64a100000000558bec6aff68........68........508b45..6489250000000083ec..85c05356578965")) {
|
|
sVersion = "3.10";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("535657bb........8b7c....553bfb75..011d")) {
|
|
sVersion = "3.0-3.10";
|
|
bDetected = true;
|
|
} else if (PE.compareEP("53b8........8b5c....565785db5575..833d..........75..33c0")) {
|
|
sVersion = "3.0-5.0";
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |