mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 11:26:11 +00:00
f2ac1ece55
add
178 lines
3.2 KiB
C#
178 lines
3.2 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: <CliSecureRT>
|
|
// Assembly: 2012, Version=0.0.0.0, Culture=neutral
|
|
// MVID: FA8E4D06-4395-4F05-87C3-C4C0E16B54D3
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan-Dropper.Win32.Injector.dblt-7c6234b9971bafa36775d3f787a0c6953ddd3783cc4702e2d3881a5e33b7586b.exe
|
|
|
|
using System;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Runtime.InteropServices;
|
|
using System.Text;
|
|
|
|
internal class \u003CCliSecureRT\u003E
|
|
{
|
|
private static byte[] \u003123 = new byte[111]
|
|
{
|
|
(byte) 49,
|
|
(byte) 163,
|
|
(byte) 153,
|
|
(byte) 112,
|
|
(byte) 87,
|
|
(byte) 113,
|
|
(byte) 24,
|
|
(byte) 47,
|
|
(byte) 79,
|
|
(byte) 181,
|
|
(byte) 182,
|
|
(byte) 112,
|
|
(byte) 109,
|
|
(byte) 104,
|
|
(byte) 100,
|
|
(byte) 18,
|
|
(byte) 41,
|
|
(byte) 29,
|
|
(byte) 34,
|
|
(byte) 229,
|
|
(byte) 32,
|
|
(byte) 34,
|
|
(byte) 183,
|
|
(byte) 37,
|
|
(byte) 118,
|
|
(byte) 32,
|
|
(byte) 252,
|
|
(byte) 203,
|
|
(byte) 244,
|
|
(byte) 81,
|
|
(byte) 46,
|
|
(byte) 74,
|
|
(byte) 66,
|
|
(byte) 84,
|
|
(byte) 176,
|
|
(byte) 24,
|
|
(byte) 207,
|
|
(byte) 253,
|
|
(byte) 165,
|
|
(byte) 60,
|
|
(byte) 69,
|
|
(byte) 47,
|
|
(byte) 0,
|
|
(byte) 236,
|
|
(byte) 242,
|
|
(byte) 206,
|
|
(byte) 125,
|
|
(byte) 65,
|
|
(byte) 173,
|
|
(byte) 139,
|
|
(byte) 26,
|
|
(byte) 58,
|
|
(byte) 129,
|
|
(byte) 179,
|
|
(byte) 117,
|
|
(byte) 15,
|
|
(byte) 234,
|
|
(byte) 115,
|
|
(byte) 248,
|
|
(byte) 55,
|
|
(byte) 116,
|
|
(byte) 76,
|
|
(byte) 58,
|
|
(byte) 252,
|
|
(byte) 134,
|
|
(byte) 107,
|
|
(byte) 46,
|
|
(byte) 24,
|
|
(byte) 182,
|
|
(byte) 75,
|
|
(byte) 66,
|
|
(byte) 42,
|
|
(byte) 118,
|
|
(byte) 228,
|
|
(byte) 160,
|
|
(byte) 239,
|
|
(byte) 33,
|
|
(byte) 202,
|
|
(byte) 49,
|
|
(byte) 166,
|
|
(byte) 161,
|
|
(byte) 186,
|
|
(byte) 29,
|
|
(byte) 105,
|
|
(byte) 55,
|
|
(byte) 243,
|
|
(byte) 199,
|
|
(byte) 142,
|
|
(byte) 222,
|
|
(byte) 160,
|
|
(byte) 45,
|
|
(byte) 91,
|
|
(byte) 5,
|
|
(byte) 110,
|
|
(byte) 199,
|
|
(byte) 248,
|
|
(byte) 244,
|
|
(byte) 3,
|
|
(byte) 101,
|
|
(byte) 135,
|
|
(byte) 160,
|
|
(byte) 100,
|
|
(byte) 137,
|
|
(byte) 97,
|
|
(byte) 72,
|
|
(byte) 238,
|
|
(byte) 194,
|
|
(byte) 156,
|
|
(byte) 18,
|
|
(byte) 132,
|
|
(byte) 236
|
|
};
|
|
|
|
[MethodImpl(MethodImplOptions.NoInlining)]
|
|
static \u003CCliSecureRT\u003E()
|
|
{
|
|
}
|
|
|
|
internal static string cs([In] string obj0)
|
|
{
|
|
label_2:
|
|
int num = 3;
|
|
int index;
|
|
bool flag;
|
|
StringBuilder stringBuilder;
|
|
while (true)
|
|
{
|
|
switch (num)
|
|
{
|
|
case 0:
|
|
flag = index < obj0.Length;
|
|
num = 1;
|
|
continue;
|
|
case 1:
|
|
if (flag)
|
|
{
|
|
stringBuilder.Append(Convert.ToChar((int) obj0[index] ^ (int) \u003CCliSecureRT\u003E.\u003123[index % \u003CCliSecureRT\u003E.\u003123.Length]));
|
|
if (true)
|
|
{
|
|
num = 2;
|
|
continue;
|
|
}
|
|
goto case 2;
|
|
}
|
|
else
|
|
goto label_9;
|
|
case 2:
|
|
++index;
|
|
goto case 0;
|
|
case 3:
|
|
stringBuilder = new StringBuilder();
|
|
index = 0;
|
|
num = 0;
|
|
continue;
|
|
default:
|
|
goto label_2;
|
|
}
|
|
}
|
|
label_9:
|
|
return stringBuilder.ToString();
|
|
}
|
|
}
|