// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>

// https://github.com/TalosSec/Cronos-Crypter
meta("cryptor", "CronosCrypter");

function detect() {
    if (PE.isNet() && PE.isSignatureInSectionPresent(0, "43 72 6F 6E 6F 73 2D 43 72 79 70 74 65 72")) {
        bDetected = true;
    }

    return result();
}
