mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-25 21:05:28 +00:00
54 lines
1.8 KiB
C#
54 lines
1.8 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
|
// Type: GrWJGkBFPXAviVGLcwppQcuhI
|
|||
|
|
// Assembly: PwnzTest, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
|
// MVID: 631E39F5-1CA8-4C07-9995-19D9DD762690
|
|||
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan.Win32.Llac.aujq-2899a5ffe6277f7b0edb8caed92e38de7a399fdb7bb9c5805376f2b5b6aeb2ec.exe
|
|||
|
|
|
|||
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
|
|
|||
|
|
public class GrWJGkBFPXAviVGLcwppQcuhI
|
|||
|
|
{
|
|||
|
|
public object LEThjJwJFKrvSGxBArVzWJrYn(string jUOghDDYNXdLBfEuNPwTuuGhr)
|
|||
|
|
{
|
|||
|
|
string str1 = "cXJyIKwvchNGLvHhzbViIluat";
|
|||
|
|
if (true)
|
|||
|
|
str1 = "bVEQBdxchQoWBRXObLtJLQodk";
|
|||
|
|
string str2 = "bgAJgPgyekGjdmflrmsAYJCkE";
|
|||
|
|
string str3 = "QvLavEFEvQdUmPZzjhoEdTzAm";
|
|||
|
|
if (Conversions.ToDouble(str2) == 53787659.0)
|
|||
|
|
str3 = Conversions.ToString(126796388);
|
|||
|
|
return (object) str3;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private void HDhLcFHbtclKjGoYVfCuNIYXT()
|
|||
|
|
{
|
|||
|
|
string str1 = "akvoUusLQaNmwvhJZFauwoxaB";
|
|||
|
|
string str2 = "BCNDcFNgpLwlLuuhcRjjFjxcD";
|
|||
|
|
string str3 = "GSyEvtnLQcVNYEUyahwovERJr";
|
|||
|
|
if (false)
|
|||
|
|
str1 = "XVOwOBwVthTFrrRkvWHnktcTJ";
|
|||
|
|
else
|
|||
|
|
str2 = str3;
|
|||
|
|
string Left = "DKZdzRzsTIotIDIvaQBJxmEPe";
|
|||
|
|
string str4 = "QnYekikJUBDRYaXkYYJKLJgRQ";
|
|||
|
|
if (Operators.CompareString(Left, "RhvlBWTnexoOosxyULbvlLsrZ", false) == 0)
|
|||
|
|
str4 = Conversions.ToString(Conversions.ToDouble(str3) + 29460047.0);
|
|||
|
|
else
|
|||
|
|
str4 = "rnHJFsnADcnlfFEEUyKgrhVkO";
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private void zzkssvUfPYYyrofcThDZWxwfp()
|
|||
|
|
{
|
|||
|
|
int num1 = 69908185;
|
|||
|
|
int num2 = 75407756;
|
|||
|
|
int num3 = 96757672;
|
|||
|
|
num3 = num1 != num2 ? 49950037 : checked (num1 - num2 + 39770705);
|
|||
|
|
string str1 = "WcgtIzEAvYxruooJgorLSWGNW";
|
|||
|
|
string str2 = "kBTWiZeGKfVnKcdYRnOJtpurE";
|
|||
|
|
if (Conversions.ToDouble(str1) > 0.0)
|
|||
|
|
str2 = "VdlZmdStiBDFNfOUBvrApfUzW";
|
|||
|
|
else
|
|||
|
|
str2 = "OHJbyQTtviokNYhvntnbVgpQl";
|
|||
|
|
}
|
|||
|
|
}
|