Detect-It-Easy/db/COM/Inbuild_Encryption.2.sg

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("protector", "Inbuild Encryption");

function detect() {
    if (Binary.compare("b9....bb....2ed2072e281f43e2")) {
        sVersion = "1.0";
        sOptions = "by Christoph Gabler";
        bDetected = true;
    }

    return result();
}