Detect-It-Easy/db/COM/CC286.2.sg

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("protector", "CC286x2");

function detect() {
    if (Binary.compare("e9$$$$eb$$e800005d81ed....eb$$bf....eb$$b0..eb$$e664eb$$b0..eb$$aaeb$$4f8d9e....eb$$538bdf")) {
        sVersion = "2.1";
        sOptions = "by Dark Stalker //UCF";
        bDetected = true;
    }

    return result();
}