Detect-It-Easy/db_extra/PE/N-Code.2.sg

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

init("protector", "N-Code");

function detect() {
    if (PE.compareEP("9066be....6683fe..74..66b8....66be....6683fe..74..6683e8..66bb....6683c3..66436681fb....74..6683f8")) {
        sVersion = "0.2";
        bDetected = true;
    }

    return result();
}