mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
20 lines
No EOL
534 B
JavaScript
Executable file
20 lines
No EOL
534 B
JavaScript
Executable file
// Detect It Easy: detection rule file
|
|
|
|
init("protector", "CodeVeil");
|
|
|
|
function detect() {
|
|
if (PE.compareEP("e9$$$$$$$$e9$$$$$$$$8bff60e8$$$$$$$$5ee8")) {
|
|
sVersion = "1.2";
|
|
bDetected = true;
|
|
} else if (PE.isNET()) {
|
|
if (PE.isNetObjectPresent("____KILL")) {
|
|
sVersion = "4.X";
|
|
bDetected = true;
|
|
} else if (PE.isNetUStringPresent("E_TamperDetected")) {
|
|
sVersion = "3.X-4.X";
|
|
bDetected = true;
|
|
}
|
|
}
|
|
|
|
return result();
|
|
} |