Detect-It-Easy/db/MSDOS/EXE-Crypt.2.sg

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("protector", "EXE-Crypt");

function detect() {
    if (MSDOS.compareEP("90eb$$2e8c......2e89......8cc88ed0bc....1e060e1f8cc005....8ec01ee8....1f8cc3be....2e8b......83....74")) {
        sVersion = "1.00";
        bDetected = true;
    }

    return result();
}