Detect-It-Easy/db/COM/com_RLE_packer.2.sg

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("packer", "com RLE packer");

function detect() {
    if (Binary.compare("60be....bf....8b0e....f3a4be....bf....57b9....f3a4c3")) {
        sOptions = "by NOP/PC";
        bDetected = true;
    } else if (Binary.compare("fc8cc833ff05....8ec006be....b9....57f3a40e07cb")) {
        bDetected = true;
    }

    return result();
}