Detect-It-Easy/db/PE/RobustObfuscator.2.sg
2025-03-23 12:41:20 +03:00

17 lines
No EOL
483 B
JavaScript

// Detect It Easy: detection rule file
// Author: DosX
// E-Mail: collab@kay-software.ru
// GitHub: https://github.com/DosX-dev
// Telegram: @DosX_dev
// https://robustify.xyz/
init("protector", "Robust Obfuscator");
function detect() {
if (PE.isNET() && PE.isSignatureInSectionPresent(0, "00 20 .. .. .. .. FE 0E .. .. 20 .. .. .. .. 20 .. .. .. .. 20 .. .. .. .. 61 20 .. .. .. .. 20 .. .. .. .. 5F 20 .. .. .. ..")) {
bDetected = true;
}
return result();
}