// Detect It Easy: detection rule file
// Author: KDSS-Research <koffidev365supp@gmail.com>

meta("tool", "AHTeam UPX Mutanter");

function detect() {
    if (PE.compareEP("94 bc 61 62 4d 00 b9 .. 00 00 00 80 34 0c .. e2")) {
        sOptions = "Method 2";
        bDetected = true;
    }
    if (PE.compareEP("94 bc .. b9 4d 00 b9 .. 00 00 00 80 34 0c .. e2")) {
        sOptions = "Method 1";
        bDetected = true;
    }

    return result();
}