Detect-It-Easy/db/PE/FISH_.NET.2.sg
2024-11-12 20:11:38 +03:00

17 lines
No EOL
411 B
JavaScript

// Detect It Easy: detection rule file
init("protector", "FISH .NET");
function detect() {
if (PE.isNET()) {
if (PE.isSignatureInSectionPresent(0, "0800'FISH_NET'")) {
sVersion = "1.X";
bDetected = true;
} else if (PE.isSignatureInSectionPresent(0, "'FISH.NET'")) {
sVersion = "1.X";
bDetected = true;
}
}
return result();
}