mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
Refactored and improved several PE detection scripts, including logic changes in 12Ghosts_Zip2, ActiveMark, FileSplit_Self-Merger, HASP_HL_Protection, HidePE, Photo_Compiler, and tcc.6. Updated meta fields for accuracy, improved detection logic, and standardized function signatures. Renamed multiple signature files to new version numbers for consistency.
12 lines
No EOL
327 B
JavaScript
12 lines
No EOL
327 B
JavaScript
// Detect It Easy: detection rule file
|
|
// Author: hypn0 <hypn0@mail.ru>
|
|
|
|
meta("other", "Partridgesoft FileSplit Self-Merger");
|
|
|
|
function detect() {
|
|
if (PE.compareEP("56576a..ff15........8bf8ff15........8a088b35........80f9..75..50ffd68a0884c974..80f9..75..50ffd6")) {
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |