Detect-It-Easy/db/PE/Oreans_CodeVirtualizer.2.sg
2024-11-12 20:11:38 +03:00

14 lines
No EOL
443 B
JavaScript

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>
init("protector", "Oreans CodeVirtualizer");
function detect() {
if (PE.compareEP("eb$$e9$$$$$$$$e9$$$$$$$$565053e8$$$$$$$$584889c348ffc0482d........482d........4805........803b..75..c603..bb........68........68........5350e8")) {
bDetected = true;
} else if (PE.isSectionNamePresent(".vlizer")) {
bDetected = true;
}
return result();
}