Create Astral-PE.2.sg

Author: DosX-dev

db/PE/Astral-PE.2.sg

@@ -0,0 +1,17 @@
+// Detect It Easy: detection rule file
+
+// Author: DosX
+// E-Mail: [email protected]
+// GitHub: https://github.com/DosX-dev
+// Telegram: @DosX_dev
+
+// https://github.com/DosX-dev/Astral-PE
+init("protector", "Astral-PE");
+
+function detect() {
+    if (PE.section[0].Name === "" && PE.getImportLibraryName(0)[0] === '.') {
+        bDetected = true;
+    }
+
+    return result();
+}