Detect-It-Easy/db/MSDOS/Header_Changer.2.sg

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("other", "Header Changer");

function detect() {
    if (MSDOS.compareEP("8cdb81c3....53bb....53501e068cdb81c3....53bb")) {
        sOptions = "by Shay Lev Ary";
        bDetected = true;
    }

    return result();
}