Detect-It-Easy/db/PE/protector_ReNET-pack.2.sg

12 lines
305 B
JavaScript
Executable file

// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>
meta("protector", "ReNET-pack");
function detect() {
if (PE.isNet() && PE.isSignatureInSectionPresent(0, "'Protected/Packed with ReNET-Pack by stx'")) {
bDetected = true;
}
return result();
}