mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
40 lines
1.3 KiB
C#
40 lines
1.3 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
|
// Type: Microsoft.InfoCards.EncryptedFileStoreHeader
|
|||
|
|
// Assembly: infocard, Version=3.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
|
|||
|
|
// MVID: 516D8B44-4448-4D2C-8B8E-FFBB3FFE472B
|
|||
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Virus.Win32.Expiro.w-69bb73081eac86b8cf86f45e33515d0095855636967076e2b593d7a30cd80a07.exe
|
|||
|
|
|
|||
|
|
using System.Runtime.InteropServices;
|
|||
|
|
|
|||
|
|
namespace Microsoft.InfoCards
|
|||
|
|
{
|
|||
|
|
[StructLayout(LayoutKind.Explicit, Size = 608)]
|
|||
|
|
internal struct EncryptedFileStoreHeader
|
|||
|
|
{
|
|||
|
|
public const int StructSize = 608;
|
|||
|
|
public const int VersionOffset = 0;
|
|||
|
|
public const int SizeOffset = 4;
|
|||
|
|
public const int KeyBlockOffset = 8;
|
|||
|
|
public const int IndexOffset = 600;
|
|||
|
|
public const int DataSizeOffset = 604;
|
|||
|
|
[MarshalAs(UnmanagedType.U4)]
|
|||
|
|
[FieldOffset(0)]
|
|||
|
|
public uint Version;
|
|||
|
|
[MarshalAs(UnmanagedType.I4)]
|
|||
|
|
[FieldOffset(4)]
|
|||
|
|
public int Size;
|
|||
|
|
[MarshalAs(UnmanagedType.Struct)]
|
|||
|
|
[FieldOffset(8)]
|
|||
|
|
public KeyBlock KeyBlock;
|
|||
|
|
[MarshalAs(UnmanagedType.Struct)]
|
|||
|
|
[FieldOffset(8)]
|
|||
|
|
public KeyBlockV2 KeyBlockV2;
|
|||
|
|
[MarshalAs(UnmanagedType.I4)]
|
|||
|
|
[FieldOffset(600)]
|
|||
|
|
public int IndexSize;
|
|||
|
|
[MarshalAs(UnmanagedType.I4)]
|
|||
|
|
[FieldOffset(604)]
|
|||
|
|
public int DataSize;
|
|||
|
|
}
|
|||
|
|
}
|