// Detect It Easy: detection rule file
// Author: KDSS-Research

// https://github.com/weak1337/Alcatraz
// https://www.elastic.co/security-labs/deobfuscating-alcatraz (protector was used in doubleloader)
meta("protector", "Alcatraz");

function detect() {
    if (PE.isSectionNamePresent(".0Dev")) { // need more samples
        bDetected = true;
    }

    return result();
}