Detect-It-Easy/db/COM/UnPackStop.2.sg
2024-11-12 20:11:38 +03:00

17 lines
No EOL
456 B
JavaScript
Executable file

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>
init("protector", "UnPackStop");
function detect() {
if (Binary.compare("68....c3")) {
var nOffset = Binary.readWord(1) - 256;
if (Binary.compare("8bc450be....bf....eb$$b8....501f58eb", nOffset)) {
sVersion = "0.95";
sOptions = "by Szaszi (Szabo Laszlo)";
bDetected = true;
}
}
return result();
}