Detect-It-Easy/db/PE/NOS_Packer.2.sg

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("packer", "NOS Packer");

function detect() {
    if (PE.compareEP("50e8000000005b81eb........b9........2bd98bf381eb........8bfb81eb........575156e8........83c4..8bab........8d2c2b4d8a4d..80f9..74..83ed..8bd32b53")) {
        sOptions = "(c) Netopsystems";
        bDetected = true;
    }

    return result();
}