mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 11:26:11 +00:00
33 lines
1.2 KiB
C#
33 lines
1.2 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: ajhfsdlhjasnagfgewfwsg.ew897dsf987dsf897xcv987saiduyixzucsdsa
|
|||
|
// Assembly: Rokan, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: 170F4640-026D-46A0-96EF-63F7CE568476
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Worm.Win32.Bybz.dma-ede80954aa264e7f1fb365b2d83e8d211c6a79e95bdca110aeaef84c696635db.exe
|
|||
|
|
|||
|
using System.Diagnostics;
|
|||
|
using System.Text;
|
|||
|
|
|||
|
namespace ajhfsdlhjasnagfgewfwsg
|
|||
|
{
|
|||
|
public class ew897dsf987dsf897xcv987saiduyixzucsdsa
|
|||
|
{
|
|||
|
[DebuggerNonUserCode]
|
|||
|
public ew897dsf987dsf897xcv987saiduyixzucsdsa()
|
|||
|
{
|
|||
|
}
|
|||
|
|
|||
|
public static string saduiyxzc87sa9d87zxcysiaud(string Data, string key) => Encoding.Default.GetString(ew897dsf987dsf897xcv987saiduyixzucsdsa.DeCrypt(Encoding.Default.GetBytes(Data), Encoding.Default.GetBytes(key)));
|
|||
|
|
|||
|
public static byte[] DeCrypt(byte[] Data, byte[] key)
|
|||
|
{
|
|||
|
int index = checked (Data.Length - 1);
|
|||
|
while (index >= 0)
|
|||
|
{
|
|||
|
Data[index] = checked ((byte) unchecked (checked (((int) Data[index] ^ (int) key[unchecked (index % key.Length)]) - (int) Data[unchecked (checked (index + 1) % Data.Length)] + 256) % 256));
|
|||
|
checked { index += -1; }
|
|||
|
}
|
|||
|
return Data;
|
|||
|
}
|
|||
|
}
|
|||
|
}
|