mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
dc2a925b3d
Renamed PE rule files to use a consistent naming convention with prefixes indicating their type (e.g., compiler_, packer_, installer_, etc.). Also updated file permissions to 100644 where needed and made minor whitespace-only changes to some files for consistency. This improves maintainability and clarity of the signature database.
12 lines
No EOL
299 B
JavaScript
12 lines
No EOL
299 B
JavaScript
// Detect It Easy: detection rule file
|
|
|
|
meta("protector", "Code Virtualizer");
|
|
|
|
function detect() {
|
|
if (PE.compareEP("609CFCE8000000005F81EF........8BC781C7........3B472C7502EB2E89472CB9A7000000EB0501448F")) {
|
|
sVersion = "1.3.1.0";
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |