mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2026-06-17 00:09:23 +00:00
f2ac1ece55
add
74 lines
1.7 KiB
C#
74 lines
1.7 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: .
|
|
// Assembly: WindowsBC, Version=1.0.0.0, Culture=neutral, PublicKeyToken=9909ee17073e3364
|
|
// MVID: 658BFC85-36E1-493D-98E6-AE9127D73D60
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Downloader.MSIL.BitCoinMiner.c-64f742a0b28b2c3d2a62ef6607fcfd5fa55b793a1aff3a6c11e014e3b119149e.exe
|
|
|
|
using \u0003;
|
|
using System;
|
|
using System.Diagnostics;
|
|
using System.Runtime.InteropServices;
|
|
using System.Windows.Forms;
|
|
|
|
namespace \u0003
|
|
{
|
|
internal sealed class \u0002
|
|
{
|
|
private static \u0002 \u0001;
|
|
private long \u0002 = DateTime.Now.Ticks;
|
|
|
|
[DllImport("kernel32", EntryPoint = "SetProcessWorkingSetSize")]
|
|
private static extern int \u0089(
|
|
IntPtr process,
|
|
int minimumWorkingSetSize,
|
|
int maximumWorkingSetSize);
|
|
|
|
private void \u0089()
|
|
{
|
|
try
|
|
{
|
|
using (Process currentProcess = Process.GetCurrentProcess())
|
|
\u0002.\u0089(currentProcess.Handle, -1, -1);
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
|
|
private void \u0089(object sender, EventArgs e)
|
|
{
|
|
try
|
|
{
|
|
long ticks = DateTime.Now.Ticks;
|
|
if (ticks - this.\u0002 <= 10000000L)
|
|
return;
|
|
this.\u0002 = ticks;
|
|
this.\u0089();
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
|
|
private \u0002()
|
|
{
|
|
// ISSUE: method pointer
|
|
Application.Idle += new EventHandler((object) this, __methodptr(\u0089));
|
|
this.\u0089();
|
|
}
|
|
|
|
public static void \u0007\u0003()
|
|
{
|
|
try
|
|
{
|
|
if (Environment.OSVersion.Platform != PlatformID.Win32NT)
|
|
return;
|
|
\u0002.\u0001 = new \u0002();
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
}
|
|
}
|