// Detect It Easy: detection rule file
// Author: horsicq <horsicq@gmail.com>
// sign by A.S.L - asl@onet.eu

// https://github.com/ximerus/Kryptonite
meta("cryptor", "Kryptonite");

function detect() {
    nOffset = 0x0093;
    if (PE.compareEP("558BEC")) {
        if (PE.compare("'Krypton'", nOffset)) {
            sVersion = "0.1-0.2";
            bDetected = true;
        }
    }

    return result();
}